Categories /

Files - Miscellaneous (40)

MiTeC EXE Explorer v3.7.0 Updated

Ennovy on 14 Feb 2024
  • 4MB (uncompressed)
  • Released on 14 Feb 2024
  • Suggested by juvera

MiTeC EXE Explorer reads and displays executable file properties and structure. It is compatible with PE32 (Portable Executable), PE32+ (64bit), NE (Windows 3.x New Executable) and VxD (Windows 9x Virtual Device Driver) file types, as well as .NET executables.

The program identify compiler and packer/protector, enumerates introduced classes, used units and forms for files compiled by Borland compilers. It contains powerfull Resource Viewer that is able to abalyze and display all basic resouce types and some extra ones as JPEG, PNG, GIF, AVI, REGISTRY and Type Library viewer that enumerates all objects and creates import interface unit in Object Pascal language. Every type of resource can be saved to file.

Program data can be output to a text report.

Category:
Runs on:WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: If "File | Persistent Layout" option is enabled, an INI file will be written to '%APPDATA%\MITEC\EXE Explorer'. Also writes to the Registry when "File | Shell Integration" is enabled (saved to 'HKLM\SOFTWARE\Classes\*\shell\EXE Explorer').
Stealth: ? Yes. But only without persistent layout or shell integration; otherwise see "Writes settings to" above.
Unicode support: Yes
License: Free for personal use
How to extract: Download the ZIP package and extract to a folder of your choice. Launch EXE.exe or EXE64.exe (for 64-bit OS).
Similar/alternative apps: PPEE, PEAnatomist, pestudio
What's new? See: https://mitec.cz/exe.html#VersionHistory
Latest comments
CornHolio the Gringo on 2018-02-06 16:27

All MiTeC software that I use, writes to registry.
MiTeC HexEdit 6.1.0
MiTeC Icon Explorer 4.2.0
MiTeC Mail Viewer 2.3.0
MiTeC Network Scanner 4.0

Therefore Ive used JauntePE060Nightly to make it true stealth.

Add comment

Detect It Easy v3.09 Updated

Andrew Lee on 1 Jan 2024
  • 14MB (uncompressed)
  • Released on 28 Dec 2023
  • Suggested by zzz

Detect It Easy (DIE) is a packer identifier in order to help define a file type. Comes in handy to analyze a file, determine its type and packer.

Category:
Runs on:WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: Application folder
Stealth: ? No. HKCU\Software\QtProject
Unicode support: Yes
License: MIT License
How to extract: Download the "portable" ZIP package and extract to a folder of your choice. Launch die.exe.
What's new? See: https://github.com/horsicq/Detect-It-Easy/blob/master/changelog.txt
Latest comments
juverax on 2018-08-04 09:27

Detect It Easyv2.00
I checked two files in virustotal:
1) die.exe virustotal = 4/67 https://www.virustotal.com/#/file/3933bcc5ab10f3fc065c982d6b035af28aa10a33d2861e2c12896f960dae0ac8/detection
2) diel.exe virustotal = 3/66
https://www.virustotal.com/#/file/2f5b85c917cdc837fa93b3bd33adb5560084f4479d521256a52bc67d7b23540d/detection

Since the author also releases the source code, it must be false positives.

AndTheWolf on 2021-07-03 15:14

Now at version 3.02

Add comment

pestudio standard v9.55

__philippe on 8 Nov 2023
  • 2MB (uncompressed)
  • Released on 18 Sep 2023
  • Suggested by joby_toss

pestudio shows details about applications and other system files (.exe, .dll, .cpl, .ocx, .ax, .sys etc.) without starting them including:

  • Libraries that are used by an application
  • Functions that are imported by an application
  • Functions (also anonymous) that are exported by an application
  • All functions that are forwarded to other libraries
  • Obsolete Functions that are exported and imported by an application
  • If Data Execution Prevention (DEP) Windows security mechanism is used
  • If Address Space Layout Randomization (ASLR) Windows security mechanism is used
  • If Windows security mechanism Structured Exception Handling (SEH) is used
  • Whether some sections are compressed

pestudio standard lacks some features of pro version.

Category:
Runs on:Win2K / WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: Application folder
Stealth: ? Yes
Unicode support: Yes
License: Free for personal use/Liteware
How to extract: Download the ZIP package and extract to a folder of your choice. Delete AddToShell.reg and RemoveFromShell.reg. Launch pestudio.exe.
Similar/alternative apps: PPEE, PE Anatomist
What's new? See: https://www.winitor.com/tools/pestudio/changes.log
Latest comments
__philippe on 2017-11-26 21:39

All righty,... next time round,

the undersigned hereby pledge to abide by the recommendations, protocols,
procedures and regulations set forth by my Right Honourable Friend Midas,
the Member for TPFC's constituency,... cross my heart and hope to die... ;-)

__philippe

Special on 2019-09-14 18:16

Looks like with 8.98 they've removed even more features from the previous 9.87 free version (detect well-known whitelisted libraries/blacklisted resources), funny they don't mention that in the changelog.

MoisheP on 2021-08-15 03:13

v. 9.15 elicits numerous warnings.

See all

PEAnatomist 02.12224.1953

__philippe on 8 Nov 2023
  • 596KB (uncompressed)
  • Released on 24 Oct 2023
  • Suggested by billon

PEAnatomist shows almost all known data structures inside a PE file and makes some analytics.
Current version provides an entropy histogram possibly handy for cursory PE forensics

Category:
Runs on:WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: Application folder
Stealth: ? Yes
Unicode support: Yes
License: MIT License
How to extract: Download the ZIP package and extract to a folder of your choice. Launch PEAnatomist.exe.
Similar/alternative apps: PPEE, MiTeC EXE Explorer, pestudio
What's new? See: https://rammerlabs.alidml.ru/changelog-eng.html
Latest comments
__philippe on 2019-12-28 12:07

PE Anatomist changelog history:

https://rammerlabs.alidml.ru/changelog-eng.html

__philippe on 2021-11-05 10:42

PEanatomist notably includes (since v0.2.4) a colorful byte-level entropy(*) histogram of the file under analysis, possibly handy for inquiring minds dabbling in PE forensics ?

* Everything you always wanted to know about entropy histograms but were scared to ask...;-)
https://crucialsecurity.wordpress.com/tag/entropy/

Add comment

PPEE v1.13.1

Special on 10 Nov 2023
  • 2MB (uncompressed)
  • Released on 10 Nov 2023
  • Suggested by billon

PPEE (Professional PE file Explorer) allows analysis of malformed and crafted PE files, making it handy for reverse-engineering, malware researchers and more. The program includes PE Export, Import, Resource, Exception, Certificate (relies on Windows API), Base Relocation, Debug, TLS, Load Config, Bound Import, IAT, Delay Import and CLR.

The program includes a HEX editor and supports Virustotal and OPSWAT's Metadefender query reports.

Category:
Runs on:WinXP / Vista / Win7 / Win8 / Win10 / Wine
Writes settings to: Application folder
Unicode support: Yes
License: Freeware
How to extract: Download the ZIP package and extract to a folder of your choice. Delete Plugin folder. Launch PPEE.exe.
Similar/alternative apps: pestudio, MiTeC EXE Explorer
What's new?
  • Now PPEE is independent of Microsoft redistributable package
  • Added Recent Files in the main PPEE menu
  • Load Config parsing improved to the newest version
  • Undecorate mangled names
  • Timestamps are human readable (relative to your local time)
  • YaraPlugin is now compatible with yara v4.3.2
  • Added Recent Files in the YaraPlugin
  • TLSH hash added in FileInfo plugin
  • Bugfixes
Latest comments
smaragdus on 2018-04-12 09:27

@doctor__philippe
What other kind of maladies do you cure? Or only software ones?

__philippe on 2018-04-12 17:50

Now that you mention it, I have been known to cure images hosting service broken links...;-)
https://www.portablefreeware.com/forums/viewtopic.php?p=89747#p89747

smaragdus on 2018-04-13 00:12

@@doctor__philippe
Thanks for the new cure!

See all

QuickWayToFolders v1.3.11

Andrew Lee on 8 Sep 2023
  • 2MB (uncompressed)
  • Released on 4 Sep 2023
  • Suggested by crownixx

QuickWayToFolders provides quick and easy access to a folder on your computer via a taskbar icon. The program window disappears when you click outside the window. Display modes include:

  • Desktop: Act like a mini-desktop, with small icons
  • Small Browser: very similar to Windows explorer in "details" view
  • Menu: Display folder content in a menu
  • Multiple Folders Menu: Display multiple folders content in a single menu (note that you must manually add them or nothing will appear when you click the icon)
In the "Menu" and "Multiple Folders Menu" settings, the program can act like a Program Launcher. Multiple instances of the program can be run with customizable icons and each entry is added to the taskbar.

To use the program as a root folder of a portable folder choose Options - Local path, then use a forward slash: "\". To set an image as a background place it in the application folder and set path as "image name.jpg" etc.

Category:
Runs on:WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: Application folder
Unicode support: No
Path portability: Requires manual entry of relative path (eg. ..\..\personal\work.doc)
License: GNU GPLv2
How to extract:
  1. Download the ZIP package and extract to a folder of your choice
  2. Launch QuickWayToFolders.exe
  3. Right-click the taskbar icon, select Options and uncheck "Launch at Windows Startup"
What's new?
  • Add support for multiple monitors
  • Handle mouse media buttons to browse forward and backward
  • Small GUI improvements and bugs solved
Latest comments
TP109 on 2016-03-21 12:48

@thehop

Thanks, those are interesting apps. I really find ShortPopUp especially useful.

smaragdus on 2016-03-21 21:28

@billon
Better trust the executable. Softpedia also corrected the version number:
http://www.softpedia.com/get/System/Launchers-Shutdown-Tools/QuickWayToFolders.shtml

Midas on 2016-05-24 11:17

The version discrepancy should be noted -- the changelog at http://jacquelin.potier.free.fr/QuickWayToFolders/history.php stops at v1.3.4 ...

See all

OpenedFilesView v1.91

Andrew Lee on 3 Sep 2023
  • 105KB (uncompressed)
  • Released on 1 Sep 2023
  • Suggested by milentechie

OpenedFilesView displays the list of all opened files on your system. For each opened file, the handle value, read/write/delete access, file position, the process that opened the file etc. are displayed. You can also close one or more opened files, or terminate the processes that opened these files. This is particularly handy when you are trying to delete/move/open a file and Windows complains that the file is "locked".

Category:
Runs on:Win2K / WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: Application folder
Dependencies: Administrator rights
Stealth: ? No. HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NIRSOFTOPENEDFILESDRIVER
Unicode support: Yes
License: Freeware
How to extract: Download the ZIP package and extract a folder of your choice. Launch OpenedFilesView.exe.
What's new?
  • Updated to work properly in high DPI mode.
  • Added 'Black Background' option (Under the View menu). When it's turned on, the main table is displayed in black background and white text, instead of default system colors.
Latest comments
Mark on 2011-02-20 09:13

There is a 64-bit version available:

http://www.nirsoft.net/utils/ofview-x64.zip

MIKLO on 2016-05-12 14:49

A very helpful program thanks for the hard work to develop this.
MIKLO

misan on 2016-05-13 16:45

It's a ~ GUI for openfiles.exe.
Nir Sofer gives us so many (to many?!)~ GUIs.
TU.

See all

NonCompressibleFiles v4.66

Andrew Lee on 27 Aug 2023
  • 110KB (uncompressed)
  • Released on 24 Aug 2023
  • Suggested by Checker

NonCompressibleFiles is a testing program that allows you to create on the fly one or more non-compressible files, or maximum compressible files. Can be used to test performance of compression programs, to find out if data transfer programs (such as FTP) are compressing the data, or test file behavior.

Category:
Runs on:Win98 / WinME / WinNT / Win2K / WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: Application folder
Stealth: ? Yes
Unicode support: Yes
License: Freeware
How to extract: Download the "Portable" ZIP package and extract to a folder of your choice. Launch NonCompressibleFiles_p.exe or NonCompressibleFiles_x64_p.exe.
What's new? See: https://softwareok.com/?seite=Microsoft/NonCompressibleFiles/History

ESEDatabaseView v1.74

Andrew Lee on 14 Aug 2023
  • 137KB (uncompressed)
  • Released on 12 Aug 2023
  • Suggested by Checker

ESEDatabaseView reads and displays the data stored inside a database used by a variety of Microsoft programs known as Extensible Storage Engine (ESE) database (aka Jet Blue or a .edb file). It displays a list of all tables available in the opened database file, allows you to choose the desired table to view, and then when you choose a table, it displays all records found in the selected table.

The program also allows you to easily choose one or more records, and then export them into a variety of formats including CSV, HTML and XML, or copy and then paste them into a spreadsheet program.

Category:
Runs on:Win2K / WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: Application folder
Stealth: ? Yes
Unicode support: Yes
License: Freeware
How to extract: Download the ZIP package and extract to a folder of your choice. Launch ESEDatabaseView.exe.
What's new?
  • Fixed issue: When copying data to the clipboard or exporting to tab-delimited file, every line contained an empty field in the end of the line.
  • Fixed the export to tab-delimited file to work properly when a column value contains CR LF characters.
Latest comments
Midas on 2013-01-15 12:17

In case (like me) you're left wondering what is this good for, here's a quote from the Wikipedia relevant article:

"ESE is notably a core of Microsoft Exchange Server and Active Directory. Its purpose is to allow applications to store and retrieve data via indexed and sequential access. Windows Mail and Desktop Search in the Windows Vista operating system also make use of ESE to store indexes and property information respectively."

http://en.wikipedia.org/wiki/Extensible_Storage_Engine

MIKLO on 2017-01-04 16:36

Well that sure clears that up lol, but really like many apps a user has a need and finds a solution that works for them and then passes along their work for others to freely use. In my mind that's the way its supposed to be.
MIKLO

Spacegirl on 2020-07-23 18:41

I think this is a very useful application

Add comment

PropertySystemView v1.20

Andrew Lee on 24 Dec 2022
  • 139KB (uncompressed)
  • Released on 23 Dec 2022
  • Suggested by Special

PropertySystemView allows you view and modify the properties of file from GUI and command-line, using the property system of Windows operating system. For example, you can change the 'Media Created' timestamp stored in .mp4 files (System.Media.DateEncoded) as well as other metadata stored in media files and office documents, like Title, Comments, Authors, Tags, Date Acquired, Last Saved Date, Content Created Date, Date Imported, Date Taken (EXIF of .jpg files), and more.

PropertySystemView also allows you to set properties of Windows. For example, you can set the System.AppUserModel.ID property of a window in order to disable the taskbar grouping of the specified window.

Category:
Runs on:Vista / Win7 / Win8 / Win10
Writes settings to: Application folder
Unicode support: Yes
License: Freeware
How to extract: Download the ZIP package and extract to a folder of your choice. Launch PropertySystemView.exe.
What's new?
  • Added /CopyProperty command-line option, which allows you to copy a value of one property into another property.
  • For example, this command will copy the value of System.DateModified property into the System.Media.DateEncoded property:
  • PropertySystemView.exe /CopyProperty "C:\temp\1.mp4" System.DateModified System.Media.DateEncoded