pestudio standard v9.55

__philippe on 8 Nov 2023
  • 2MB (uncompressed)
  • Released on 18 Sep 2023
  • Suggested by joby_toss

pestudio shows details about applications and other system files (.exe, .dll, .cpl, .ocx, .ax, .sys etc.) without starting them including:

  • Libraries that are used by an application
  • Functions that are imported by an application
  • Functions (also anonymous) that are exported by an application
  • All functions that are forwarded to other libraries
  • Obsolete Functions that are exported and imported by an application
  • If Data Execution Prevention (DEP) Windows security mechanism is used
  • If Address Space Layout Randomization (ASLR) Windows security mechanism is used
  • If Windows security mechanism Structured Exception Handling (SEH) is used
  • Whether some sections are compressed

pestudio standard lacks some features of pro version.

Category:
Runs on:Win2K / WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: Application folder
Stealth: ? Yes
Unicode support: Yes
License: Free for personal use/Liteware
How to extract: Download the ZIP package and extract to a folder of your choice. Delete AddToShell.reg and RemoveFromShell.reg. Launch pestudio.exe.
Similar/alternative apps: PPEE, PE Anatomist
What's new? See: https://www.winitor.com/tools/pestudio/changes.log

86 comments on pestudio standard  The Portable Freeware Collection Latest Entries Feed

MoisheP 2021-08-15 03:13

v. 9.15 elicits numerous warnings.

v9.15

Special 2019-09-14 18:16

Looks like with 8.98 they've removed even more features from the previous 9.87 free version (detect well-known whitelisted libraries/blacklisted resources), funny they don't mention that in the changelog.

v8.98

__philippe 2017-11-26 21:39

All righty,... next time round,

the undersigned hereby pledge to abide by the recommendations, protocols,
procedures and regulations set forth by my Right Honourable Friend Midas,
the Member for TPFC's constituency,... cross my heart and hope to die... ;-)

__philippe

v8.69

Midas 2017-11-26 19:37

Like noted elsewhere, unless significant for the comment exchange, program changelogs are best posted to the forum topic (or entered at the appropriate field), my dear _phillipe. B-)

v8.69

__philippe 2017-11-26 12:10

PEstudio v8.70 - Link date 22-NOV-2017

v8.70 changelog:
. Expose the indicators id number in the output XML file
. Extend grouping of utilities
. Extend grouping of imports by types and colors

v8.69

__philippe 2017-10-30 16:20

PEstudio v8.69 released 30-OCT-2017

v8.69 Changelog:
. Add grouping of imports by types and colors
. Extend strings "hint" detection and mapping

Note the colorful "import grouping by types" is NOT available in the free version.
See comparative features availability in free and commercial versions hereafter:
https://www.winitor.com/tools/pestudio/current/pestudio-features.pdf

For a worthy alternative to PEstudio, one might consider the recently updated PPee v1.10
https://www.portablefreeware.com/index.php?id=2858

v8.69

__philippe 2017-10-08 15:36

PEstudio v8.67 released 08-OCT-2017

v8.67 Changelog:
• Map strings "hint" to their Human-friendly name

v8.66

__philippe 2017-10-01 20:09

PEstudio v8.66 released 01-OCT-2017

v8.66 Changelog:
• Fixed a bug when computing the position of an entry-point located at the very beginning of a section
• Added detection of strings "hint" (e.g. GUID, RTTI, ..)

https://www.winitor.com/tools/pestudio/changes.log

v8.65

__philippe 2017-08-21 14:13

PEstudio v8.63 released 21-AUG-2017

v8.63 Changelog:
• Add detection of whitlelist (well-known) strings
• Add detection of deprecated functions
• Add detection of undocumented functions
• Consolidate indicators

CLI prompt working fine, thanks for asking...;-)

v8.62

__philippe 2017-08-12 19:28

PEstudio v8.62 released 12-AUG-2017

v8.62 Changelog :
• Extend resources type detection
• Extend handling of malformed manifests
• Extend handling of file signatures
• Detect "unusual" dos-stub messages

Gratefully, the CLI prompt has consented to behave decently once again,
(and forever after? - fingers crossed...)

Thanks Marc ...;-)

v8.61

Older comments are hidden - Click to display all comments ▾

Post your comment