PPEE - Professional PE file Explorer
Re: PPEE - Professional PE file Explorer
Wow, with new YARA plugin, it can replace good old PEiD in regards of detection
YARA rules
pestudio completely sucks
YARA rules
pestudio completely sucks
- __philippe
- Posts: 687
- Joined: Wed Jun 26, 2013 2:09 am
Re: PPEE - Professional PE file Explorer
And just in case someone else was still wondering about YARA wonders :
- __philippe
- Posts: 687
- Joined: Wed Jun 26, 2013 2:09 am
Re: PPEE - Professional PE file Explorer
And just as luck would have it...
YARA Rules practical application (*)
(in the context of the recent CCleaner v5.33 hacking episode.)
(*) aka: Shutting the stable door after the horse has bolted...
YARA Rules practical application (*)
(in the context of the recent CCleaner v5.33 hacking episode.)
(*) aka: Shutting the stable door after the horse has bolted...
Re: PPEE - Professional PE file Explorer
Hi. New version(1.12) of PPEE (puppy) is out!
Download: https://www.mzrst.com/
Changes in v1.12:
Download: https://www.mzrst.com/
Changes in v1.12:
- Rich Header supported (Experimental)
- Resolve ordinal to name in imported APIs
- File description of imported modules is shown
- Filter/Search box added for listview
- PE type icon added in statusbar
- .ini file converted to UTF
- SHA256 and ImpHash added in FileInfo plugin
- Bugfixes
Re: PPEE - Professional PE file Explorer
Thank you for the update and welcome to our Forum, PPEE.
- __philippe
- Posts: 687
- Joined: Wed Jun 26, 2013 2:09 am
Re: PPEE - Professional PE file Explorer
Welcome onboard , Majid !
Thanks for PPEE v1.12 nice complement of new features and also for upholding support under good ole Win XP !
Also appreciate PPEE runs flawlessly when invoked from CLI command,
which can't be said of some well known competing product (which shall remain nameless )
Thanks for PPEE v1.12 nice complement of new features and also for upholding support under good ole Win XP !
Also appreciate PPEE runs flawlessly when invoked from CLI command,
which can't be said of some well known competing product (which shall remain nameless )
Re: PPEE - Professional PE file Explorer
That's very kind of you I have also explained some of the recent features of PPEE in a blog post https://www.mzrst.com/blog/2018/08/18/p ... -features/__philippe wrote: ↑Wed Aug 22, 2018 10:57 am Welcome onboard , Majid !
Thanks for PPEE v1.12 nice complement of new features and also for upholding support under good ole Win XP !
Also appreciate PPEE runs flawlessly when invoked from CLI command,
which can't be said of some well known competing product (which shall remain nameless )
Re: PPEE - Professional PE file Explorer
Topic update: PPEE v1.13 released 2023-11-07 (no online changelog apart from the one included in program's archive).
Spoiler!
Re: PPEE - Professional PE file Explorer
PPEE v1.13.1 released as of today, nothing was added in the readme/changelog though...
- __philippe
- Posts: 687
- Joined: Wed Jun 26, 2013 2:09 am
Re: PPEE - Professional PE file Explorer
Forensic introspection of v1.13 and v1.13.1 binaries (C:\ppee ppee.exe… ) reveal,
under the "Rich Header" tab, at least one notable difference beween run time modules :
they were produced by different C++ compiler versions.
under the "Rich Header" tab, at least one notable difference beween run time modules :
they were produced by different C++ compiler versions.