btw, not sure I mentioned that PeStudio is also on Twitter: https://twitter.com/ochsenmeier
@StillAlive: thank you very much for this input! Actually I am already working on MD5 for sections and Resources. Entropy is also in the pipe....
@Fabian Wosar: Can I add this handy .reg file to the PeStudio package?
@EASTER: Thanks for the compliment! :-)
Thanks Fabian! PeStudio does not write anything on the system it is running on, that is why I never released this handy Registry trick (that...
PeStudio has been updated: . Added Handling of Blacklisted imported Functions (API) based on the PeStudioBlackListFunctions.XML (You can edit...
@J_L: "Lookup to VirusTotal" is disabled by default because some people complained that is was enabled by default. You can enable it by editing...
@StillAlive: Thanks for the update. Btw, just updated PeStudio: . Added detection of MPRESS compression . Added detection of UPX evasion (one or...
@StillAlive: PeStudio 7.02 just released. It should correct the bug. Can you please confirm? Thanks!
@StillAlive: thank you! Let me have look at the strings enumeration asap. I will post here when done.
@StillAlive: yes of course. I'll put it on the todo list!
PeStudio 7.01 is now available: - Added a new PeStudioStringsBlackList.xml file. This file contains the list of blacklisted strings which will...
PeStudio 7.00 is now available: . Added additional Hints about suspicious size of the Version Resource (some malware place custom stream in...
sorry about the memory issue. I'll have a look at it.
@J_L: I am pleased you like PeStudio! Upload is in the pipe. No dependency, no requirement, fully portable, these are the goals of PeStudio.
Thanks for your remark about this issue! Really sorry, yes libraries have been hit by a side-effect. This has been fixed in version 6.97. Is it...
OK, next version will have a PeStudioSettings.xml file.
@stackz: PeStudio 6.96 is now available at www.winitor.com and corrects (among other new features) the malformation of the XML report file created
@stakz: thanks! I am preparing an XML schema for the XML report.
@stackz: XML report malformation has been fixed and will be available with PeStudio 6.96 soon
@stackz: thanks for reporting the XML malformation. The XML file is on my TODO list!
@Nebulus: what about an INI file (or an XML) file to control how PeStudio acts? (e.g. establish a connection to VT...)
thanks for using PeStudio! I'll have a look about a confirmation to VT URL...
PeStudio has been updated: . Add detection of Embedded Executable Files Outside the Resources . Differentiate between Embedded Executable...
Hello, I am the author of PeStudio. Thanks for using this tool! Don't hesitate to contact me (email address available at www.winitor.com)...
Separate names with a comma.
