Anyone using PeStudio by Winitor?

Discussion in 'other anti-malware software' started by Tyrizian, May 27, 2013.

  1. Tyrizian

    Tyrizian Registered Member

    Joined:
    Apr 26, 2012
    Posts:
    2,806

    PeStudio - http://winitor.com/
     
  2. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,833
    Thanks :thumb: I just tried it & it worked fine :)

    Quite useful in many ways :thumb:

    What do you make of it ?
     
  3. Tyrizian

    Tyrizian Registered Member

    Joined:
    Apr 26, 2012
    Posts:
    2,806
    I haven't tried it yet, but basing it off of what you just said...I'm going to give it a go.

    I'll post my opinion on it soon.
     
  4. Tyrizian

    Tyrizian Registered Member

    Joined:
    Apr 26, 2012
    Posts:
    2,806
    Ok, I'm back with my opinion.

    No complaints

    Very useful tool, Leaving it on my machine :thumb:
     
  5. Marc Ochsenmeier

    Marc Ochsenmeier Developer

    Joined:
    Jun 6, 2013
    Posts:
    150
    Location:
    Germany
    Hello,

    I am the author of PeStudio. Thanks for using this tool! Don't hesitate to contact me (email address available at www.winitor.com) directly when needed (bug, request feature....)

    PeStudio is still under construction and is also on Twitter: https://twitter.com/ochsenmeier

    Thanks
     
  6. Fabian Wosar

    Fabian Wosar Developer

    Joined:
    Aug 26, 2010
    Posts:
    787
    Location:
    Germany
    I have been using it for the past couple of weeks as a replacement for CFF. Unless you need to actually edit the PE file and don't just want to take a look at it, PE Studio is the more convenient to use tool in my opinion.

    Plus, Marc is a great guy and fast to implement new suggestions and fix bugs. That's always a plus ;).
     
  7. NSG001

    NSG001 Registered Member

    Joined:
    Jul 14, 2006
    Posts:
    617
    Location:
    Wembley, London
    Great addition, thanks all for info :thumb:
     
  8. shadek

    shadek Registered Member

    Joined:
    Feb 26, 2008
    Posts:
    2,363
    Location:
    Sweden
    What a neat piece of software. I'll be sure to try it out!
     
  9. Tyrizian

    Tyrizian Registered Member

    Joined:
    Apr 26, 2012
    Posts:
    2,806
    Thank you Mox for joining us here at the forums, I'm excited to see what you got planned for future versions.
     
  10. Marc Ochsenmeier

    Marc Ochsenmeier Developer

    Joined:
    Jun 6, 2013
    Posts:
    150
    Location:
    Germany
    PeStudio has been updated:

    . Add detection of Embedded Executable Files Outside the Resources
    . Differentiate between Embedded Executable Files inside and outside the Resources and show these as Indicators
     
  11. stackz

    stackz Registered Member

    Joined:
    Dec 27, 2007
    Posts:
    621
    Location:
    Sydney Australia
    Version 6.94
    There is a bug in the XML file reports within <Character_set> of <version_information> that corrupts the XML file.
    e.g. This is reported as the character set (hex)
    Code:
    e5 84 90 ce bf ec 87 98 36 e5 84 90 ce bf 00 00 ec 87 98 36 e8 b4 8f e7 82 80 e5 84 a0 ce bf ec 86 b0 36 34 00 ea a8 a0 e0 be 89 ec 87 ac 36 e3 8a bf e7 82 84 ec 86 b0 36
    
    Either unchecking version information or editing out the character set allows the file to display correctly. :)
     
  12. Nebulus

    Nebulus Registered Member

    Joined:
    Jan 20, 2007
    Posts:
    1,582
    Location:
    European Union
    I just tried it and I like the software. My only problem is that it wants to connect to VirusTotal without asking me, and after I deny it, the interface locks completely until connection attempt time-out.
     
  13. Marc Ochsenmeier

    Marc Ochsenmeier Developer

    Joined:
    Jun 6, 2013
    Posts:
    150
    Location:
    Germany
    thanks for using PeStudio! I'll have a look about a confirmation to VT URL...
     
  14. Marc Ochsenmeier

    Marc Ochsenmeier Developer

    Joined:
    Jun 6, 2013
    Posts:
    150
    Location:
    Germany
    @Nebulus: what about an INI file (or an XML) file to control how PeStudio acts? (e.g. establish a connection to VT...)
     
  15. Marc Ochsenmeier

    Marc Ochsenmeier Developer

    Joined:
    Jun 6, 2013
    Posts:
    150
    Location:
    Germany
    @stackz: thanks for reporting the XML malformation. The XML file is on my TODO list!
     
  16. Marc Ochsenmeier

    Marc Ochsenmeier Developer

    Joined:
    Jun 6, 2013
    Posts:
    150
    Location:
    Germany
    @stackz: XML report malformation has been fixed and will be available with PeStudio 6.96 soon
     
  17. c2d

    c2d Registered Member

    Joined:
    Sep 26, 2007
    Posts:
    570
    Location:
    Bosnia
    I'll try it in the next couple of days.
    Off topic:TyRidian,what happened to your old username?
     
  18. stackz

    stackz Registered Member

    Joined:
    Dec 27, 2007
    Posts:
    621
    Location:
    Sydney Australia
    Nice work! I'll be looking forward to it as well as future releases. :)
     
  19. Marc Ochsenmeier

    Marc Ochsenmeier Developer

    Joined:
    Jun 6, 2013
    Posts:
    150
    Location:
    Germany
    @stakz: thanks! I am preparing an XML schema for the XML report.
     
  20. Nebulus

    Nebulus Registered Member

    Joined:
    Jan 20, 2007
    Posts:
    1,582
    Location:
    European Union
    It is a good idea. For me, there is no need for an interface based option, and because nobody else seemed to mind, I think that an XML file is enough :)
     
  21. TheKid7

    TheKid7 Registered Member

    Joined:
    Jul 22, 2006
    Posts:
    3,469
    What is CFF?
     
  22. Fabian Wosar

    Fabian Wosar Developer

    Joined:
    Aug 26, 2010
    Posts:
    787
    Location:
    Germany
  23. Marc Ochsenmeier

    Marc Ochsenmeier Developer

    Joined:
    Jun 6, 2013
    Posts:
    150
    Location:
    Germany
    @stackz: PeStudio 6.96 is now available at www.winitor.com and corrects (among other new features) the malformation of the XML report file created
     
  24. TheKid7

    TheKid7 Registered Member

    Joined:
    Jul 22, 2006
    Posts:
    3,469
  25. Marc Ochsenmeier

    Marc Ochsenmeier Developer

    Joined:
    Jun 6, 2013
    Posts:
    150
    Location:
    Germany
    OK, next version will have a PeStudioSettings.xml file.
     
Loading...