pestudio v8.86 Updated

billon on 16 Dec 2018
  • 4MB (uncompressed)
  • Released on 16 Dec 2018
  • Suggested by joby_toss

pestudio shows details about applications and other system files (.exe, .dll, .cpl, .ocx, .ax, .sys etc.) without starting them including:

  • Libraries that are used by an application
  • Functions that are imported by an application
  • Functions (also anonymous) that are exported by an application
  • All functions that are forwarded to other libraries
  • Obsolete Functions that are exported and imported by an application
  • If Data Execution Prevention (DEP) Windows security mechanism is used
  • If Address Space Layout Randomization (ASLR) Windows security mechanism is used
  • If Windows security mechanism Structured Exception Handling (SEH) is used
  • Whether some sections are compressed

pestudio standard lacks some features of pro version, see comparison here (PDF file!).

Category:
System Requirements: Win2K / WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: None
Stealth: ? Yes
Unicode support: Yes
License: Freeware
How to extract: Download the ZIP package and extract to a folder of your choice. Delete AddToShell.reg and RemoveFromShell.reg. Launch pestudio.exe.
Similar/alternative apps: PPEE
What's new?
  • Add search Google and Virustotal for resources.
  • Fix bugs.

84 comments on pestudio  The Portable Freeware Collection Latest Entries Feed

__philippe 2017-11-26 21:39

All righty,... next time round,

the undersigned hereby pledge to abide by the recommendations, protocols,
procedures and regulations set forth by my Right Honourable Friend Midas,
the Member for TPFC's constituency,... cross my heart and hope to die... ;-)

__philippe

v8.69

Midas 2017-11-26 19:37

Like noted elsewhere, unless significant for the comment exchange, program changelogs are best posted to the forum topic (or entered at the appropriate field), my dear _phillipe. B-)

v8.69

__philippe 2017-11-26 12:10

PEstudio v8.70 - Link date 22-NOV-2017

v8.70 changelog:
. Expose the indicators id number in the output XML file
. Extend grouping of utilities
. Extend grouping of imports by types and colors

v8.69

__philippe 2017-10-30 16:20

PEstudio v8.69 released 30-OCT-2017

v8.69 Changelog:
. Add grouping of imports by types and colors
. Extend strings "hint" detection and mapping

Note the colorful "import grouping by types" is NOT available in the free version.
See comparative features availability in free and commercial versions hereafter:
https://www.winitor.com/tools/pestudio/current/pestudio-features.pdf

For a worthy alternative to PEstudio, one might consider the recently updated PPee v1.10
https://www.portablefreeware.com/index.php?id=2858

v8.69

__philippe 2017-10-08 15:36

PEstudio v8.67 released 08-OCT-2017

v8.67 Changelog:
• Map strings "hint" to their Human-friendly name

v8.66

__philippe 2017-10-01 20:09

PEstudio v8.66 released 01-OCT-2017

v8.66 Changelog:
• Fixed a bug when computing the position of an entry-point located at the very beginning of a section
• Added detection of strings "hint" (e.g. GUID, RTTI, ..)

https://www.winitor.com/tools/pestudio/changes.log

v8.65

__philippe 2017-08-21 14:13

PEstudio v8.63 released 21-AUG-2017

v8.63 Changelog:
• Add detection of whitlelist (well-known) strings
• Add detection of deprecated functions
• Add detection of undocumented functions
• Consolidate indicators

CLI prompt working fine, thanks for asking...;-)

v8.62

__philippe 2017-08-12 19:28

PEstudio v8.62 released 12-AUG-2017

v8.62 Changelog :
• Extend resources type detection
• Extend handling of malformed manifests
• Extend handling of file signatures
• Detect "unusual" dos-stub messages

Gratefully, the CLI prompt has consented to behave decently once again,
(and forever after? - fingers crossed...)

Thanks Marc ...;-)

v8.61

__philippe 2017-07-23 14:09

PEstudio v8.61 released 22-JUL-2017

Version 8.61 changelog:
. Increase performance when loading executable with large collection of exports
. Consolidate switches in settings.xml
. Consolidate API classification
. Fix a bug when handling the Thread-Local Storage (TLS)
. Fix a bug of the Manifest View
. Fix a bug when detecting 64-bit managed files
. Add online check of update in the "About" dialog
. Add support for ARM detection
. Indicate missing library
. Extend features of standard version


Unfortunately, the command line prompt usage "pestudio -file: typical.exe"....is broken again in v8.61,
an annoyingly recurring problem also marring former versions v7.52 / v8.13 / v8.52

Developer has been notified.

v8.60

__philippe 2017-05-21 20:21

PEstudio v8.60 released 20-MAY-2017

Changelog :
. Add detection of Control Flow Guard (CFG)
. Add details for Vir*stotal view

v8.59

Older comments are hidden - Click to display all comments ▾

Post your comment