PEAnatomist 02.12224.1953
__philippe on 8 Nov 2023 Change history
- 596KB (uncompressed)
- Released on 24 Oct 2023
- Suggested by billon
PEAnatomist shows almost all known data structures inside a PE file and makes some analytics.
Current version provides an entropy histogram possibly handy for cursory PE forensics
| Category: | |
| Runs on: | WinXP / Vista / Win7 / Win8 / Win10 |
| Writes settings to: | Application folder |
| Stealth: ? | Yes |
| Unicode support: | Yes |
| License: | MIT License |
| How to extract: | Download the ZIP package and extract to a folder of your choice. Launch PEAnatomist.exe. |
| Similar/alternative apps: | PPEE, MiTeC EXE Explorer, pestudio |
| What's new? | See: https://rammerlabs.alidml.ru/changelog-eng.html |
2 comments on PEAnatomist
__philippe
2019-12-28 12:07
PE Anatomist changelog history:
https://rammerlabs.alidml.ru/changelog-eng.html
v0.1.9
PEanatomist notably includes (since v0.2.4) a colorful byte-level entropy(*) histogram of the file under analysis, possibly handy for inquiring minds dabbling in PE forensics ?
* Everything you always wanted to know about entropy histograms but were scared to ask...;-)
https://crucialsecurity.wordpress.com/tag/entropy/
v0.2.5