Categories /

Files - Miscellaneous (35)

pestudio v8.68 Updated

billon on 15 Oct 2017
  • 4MB (uncompressed)
  • Released on 15 Oct 2017
  • Suggested by joby_toss

pestudio shows details about applications and other system files (.exe, .dll, .cpl, ocx, .ax, .sys etc.) without starting them including:

  • Libraries that are used by an application
  • Functions that are imported by an application
  • Functions (also anonymous) that are exported by an application
  • All functions that are forwarded to other libraries
  • Obsolete Functions that are exported and imported by an application
  • If Data Execution Prevention (DEP) Windows security mechanism is used
  • If Address Space Layout Randomization (ASLR) Windows security mechanism is used
  • If Windows security mechanism Structured Exception Handling (SEH) is used
  • Whether some sections are compressed

pestudio standard lacks some features of pro version, see comparison here (PDF file!).

Category:
System Requirements: Win2K / WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: None
Stealth: ? Yes
Unicode support: Yes
License: Freeware
How to extract: Download the ZIP package and extract to a folder of your choice. Delete AddToShell.reg and RemoveFromShell.reg. Launch pestudio.exe.
Similar/alternative apps: PPEE
What's new?
  • Extended:
    • Signatures detection;
    • Strings "hint" detection and mapping.
Latest comments
__philippe on 2017-08-21 14:13

PEstudio v8.63 released 21-AUG-2017

v8.63 Changelog:
• Add detection of whitlelist (well-known) strings
• Add detection of deprecated functions
• Add detection of undocumented functions
• Consolidate indicators

CLI prompt working fine, thanks for asking...;-)

__philippe on 2017-10-01 20:09

PEstudio v8.66 released 01-OCT-2017

v8.66 Changelog:
• Fixed a bug when computing the position of an entry-point located at the very beginning of a section
• Added detection of strings "hint" (e.g. GUID, RTTI, ..)

https://www.winitor.com/tools/pestudio/changes.log

__philippe on 2017-10-08 15:36

PEstudio v8.67 released 08-OCT-2017

v8.67 Changelog:
• Map strings "hint" to their Human-friendly name

See all

JumpListsView v1.11 Updated

billon on 29 Sep 2017
  • 108KB (uncompressed)
  • Released on 28 Sep 2017
  • Suggested by Checker

JumpListsView displays the information stored by the 'Jump Lists' feature available when you right-click on something in the task bar in Windows 7 - 10. For every record found, data available includes the filename that the user opened, the date/time, the ID of the application, the size/time/attributes of the file on the time that the file was opened etc.

You can also export the Jump Lists records to csv/tab-delimited/xml/html file.

Category:
System Requirements: Win7 / Win8 / Win10
Writes settings to: Application folder
Stealth: ? Yes
Unicode support: Yes
License: Freeware
How to extract: Download the ZIP package and extract to a folder of your choice. Launch JumpListsView.exe.
What's new?
  • Fixed bug: JumpListsView crashed when it failed to open a jump list file.

NonCompressibleFiles v2.61 Updated

billon on 20 Sep 2017
  • 64KB (uncompressed)
  • Released on 19 Sep 2017
  • Suggested by Checker

NonCompressibleFiles is a testing program that allows you to create on the fly one or more non-compressible files, or maximum compressible files. Can be used to test performance of compression programs, to find out if data transfer programs (such as FTP) are compressing the data, or test file behavior.

Category:
System Requirements: Win98 / WinME / WinNT / Win2K / WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: Application folder
Stealth: ? Yes
Unicode support: Yes
License: Freeware
How to extract: Download the "Portable" ZIP package and extract to a folder of your choice. Launch NonCompressibleFiles.exe or NonCompressibleFiles_x64.exe.
What's new?
  • Small corrections and adjustments as well as tests on Server 2016 plus new language: Chinese Traditional.

ESEDatabaseView v1.54 Updated

billon on 24 Jul 2017
  • 138KB (uncompressed)
  • Released on 23 Jul 2017
  • Suggested by Checker

ESEDatabaseView reads and displays the data stored inside a database program used by a variety of Microsoft programs known as Extensible Storage Engine (ESE) database (aka Jet Blue or a .edb file). It displays a list of all tables available in the opened database file, allows you to choose the desired table to view, and then when you choose a table, it displays all records found in the selected table.

The program also allows you to easily choose one or more records, and then export them into a variety of formats including CSV, HTML, and XML, or copy and then paste them into a spreadsheet program.

Category:
System Requirements: Win2K / WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: Application folder
Stealth: ? Yes
License: Freeware
How to extract: Download the ZIP package and extract to a folder of your choice. Launch ESEDatabaseView.exe.
What's new? Added:
  • New quick filter options: 'Find records with all words (space-delimited list)' and 'Find records with all strings (comma-delimited list)'.
  • New quick filter combo-box: 'Show only items match the filter' and 'Hide items that match the filter'.
Latest comments
Midas on 2013-01-15 12:17

In case (like me) you're left wondering what is this good for, here's a quote from the Wikipedia relevant article:

"ESE is notably a core of Microsoft Exchange Server and Active Directory. Its purpose is to allow applications to store and retrieve data via indexed and sequential access. Windows Mail and Desktop Search in the Windows Vista operating system also make use of ESE to store indexes and property information respectively."

http://en.wikipedia.org/wiki/Extensible_Storage_Engine

MIKLO on 2017-01-04 16:36

Well that sure clears that up lol, but really like many apps a user has a need and finds a solution that works for them and then passes along their work for others to freely use. In my mind that's the way its supposed to be.
MIKLO

Add comment

NTFSLinksView v1.30

billon on 18 May 2017
  • 69KB (uncompressed)
  • Released on 18 May 2017
  • Suggested by guinness

NTFSLinksView shows you a list of all symbolic links and junctions in the specified folder, and their target paths. Microsoft Windows uses symbolic links and junction points of NTFS file system in order to make changes in the folders structure of Windows and keep the compatibility of applications written for older versions (pre-Vista). The program is useful for both diagnosis around linking issues and developers seeking to use symbolic links in their tools.

Category:
System Requirements: Vista / Win7 / Win8 / Win10
Writes settings to: Application folder
Stealth: ? Yes
Unicode support: Yes
License: Freeware
How to extract: Download the ZIP package and extract to a folder of your choice. Launch NTFSLinksView.exe.
What's new?
  • Added support for searching hard links.