pestudio shows details about applications and other system files (.exe, .dll, .cpl, .ocx, .ax, .sys etc.) without starting them including:
Category: | |
Runs on: | Win2K / WinXP / Vista / Win7 / Win8 / Win10 |
Writes settings to: | Application folder |
Stealth: ? | Yes |
Unicode support: | Yes |
License: | Free for personal use/Liteware |
How to extract: | Download the ZIP package and extract to a folder of your choice. Delete AddToShell.reg and RemoveFromShell.reg. Launch pestudio.exe. |
Similar/alternative apps: | PPEE, PE Anatomist |
What's new? | See: https://www.winitor.com/tools/pestudio/changes.log |
Latest comments |
__philippe
on 2017-11-26 21:39
All righty,... next time round,
Special
on 2019-09-14 18:16
See all
86›
Looks like with 8.98 they've removed even more features from the previous 9.87 free version (detect well-known whitelisted libraries/blacklisted resources), funny they don't mention that in the changelog. |
PEAnatomist shows almost all known data structures inside a PE file and makes some analytics.
Current version provides an entropy histogram possibly handy for cursory PE forensics
Category: | |
Runs on: | WinXP / Vista / Win7 / Win8 / Win10 |
Writes settings to: | Application folder |
Stealth: ? | Yes |
Unicode support: | Yes |
License: | MIT License |
How to extract: | Download the ZIP package and extract to a folder of your choice. Launch PEAnatomist.exe. |
Similar/alternative apps: | PPEE, MiTeC EXE Explorer, pestudio |
What's new? | See: https://rammerlabs.alidml.ru/changelog-eng.html |
Latest comments |
__philippe
on 2019-12-28 12:07
PE Anatomist changelog history:
__philippe
on 2021-11-05 10:42
Add comment
2›
PEanatomist notably includes (since v0.2.4) a colorful byte-level entropy(*) histogram of the file under analysis, possibly handy for inquiring minds dabbling in PE forensics ? |
PPEE (Professional PE file Explorer) allows analysis of malformed and crafted PE files, making it handy for reverse-engineering, malware researchers and more. The program includes PE Export, Import, Resource, Exception, Certificate (relies on Windows API), Base Relocation, Debug, TLS, Load Config, Bound Import, IAT, Delay Import and CLR.
The program includes a HEX editor and supports Virustotal and OPSWAT's Metadefender query reports.
Category: | |
Runs on: | WinXP / Vista / Win7 / Win8 / Win10 / Wine |
Writes settings to: | Application folder |
Unicode support: | Yes |
License: | Freeware |
How to extract: | Download the ZIP package and extract to a folder of your choice. Delete Plugin folder. Launch PPEE.exe. |
Similar/alternative apps: | pestudio, MiTeC EXE Explorer |
What's new? |
|
Latest comments |
smaragdus
on 2018-04-12 09:27
@doctor__philippe
__philippe
on 2018-04-12 17:50
See all
16›
Now that you mention it, I have been known to cure images hosting service broken links...;-) |
QuickWayToFolders provides quick and easy access to a folder on your computer via a taskbar icon. The program window disappears when you click outside the window. Display modes include:
Category: | |
Runs on: | WinXP / Vista / Win7 / Win8 / Win10 |
Writes settings to: | Application folder |
Unicode support: | No |
Path portability: | Requires manual entry of relative path (eg. ..\..\personal\work.doc) |
License: | GNU GPLv2 |
How to extract: |
|
What's new? |
|
Latest comments |
TP109
on 2016-03-21 12:48
@thehop
smaragdus
on 2016-03-21 21:28
@billon
Midas
on 2016-05-24 11:17
See all
10›
The version discrepancy should be noted -- the changelog at http://jacquelin.potier.free.fr/QuickWayToFolders/history.php stops at v1.3.4 ... |
OpenedFilesView displays the list of all opened files on your system. For each opened file, the handle value, read/write/delete access, file position, the process that opened the file etc. are displayed. You can also close one or more opened files, or terminate the processes that opened these files. This is particularly handy when you are trying to delete/move/open a file and Windows complains that the file is "locked".
Category: | |
Runs on: | Win2K / WinXP / Vista / Win7 / Win8 / Win10 |
Writes settings to: | Application folder |
Dependencies: | Administrator rights |
Stealth: ? | No. HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NIRSOFTOPENEDFILESDRIVER |
Unicode support: | Yes |
License: | Freeware |
How to extract: | Download the ZIP package and extract a folder of your choice. Launch OpenedFilesView.exe. |
What's new? |
|
Latest comments |
Mark
on 2011-02-20 09:13
There is a 64-bit version available:
misan
on 2016-05-13 16:45
See all
8›
It's a ~ GUI for openfiles.exe. |
NonCompressibleFiles is a testing program that allows you to create on the fly one or more non-compressible files, or maximum compressible files. Can be used to test performance of compression programs, to find out if data transfer programs (such as FTP) are compressing the data, or test file behavior.
Category: | |
Runs on: | Win98 / WinME / WinNT / Win2K / WinXP / Vista / Win7 / Win8 / Win10 |
Writes settings to: | Application folder |
Stealth: ? | Yes |
Unicode support: | Yes |
License: | Freeware |
How to extract: | Download the "Portable" ZIP package and extract to a folder of your choice. Launch NonCompressibleFiles_p.exe or NonCompressibleFiles_x64_p.exe. |
What's new? | See: https://softwareok.com/?seite=Microsoft/NonCompressibleFiles/History |
ESEDatabaseView reads and displays the data stored inside a database used by a variety of Microsoft programs known as Extensible Storage Engine (ESE) database (aka Jet Blue or a .edb file). It displays a list of all tables available in the opened database file, allows you to choose the desired table to view, and then when you choose a table, it displays all records found in the selected table.
The program also allows you to easily choose one or more records, and then export them into a variety of formats including CSV, HTML and XML, or copy and then paste them into a spreadsheet program.
Category: | |
Runs on: | Win2K / WinXP / Vista / Win7 / Win8 / Win10 |
Writes settings to: | Application folder |
Stealth: ? | Yes |
Unicode support: | Yes |
License: | Freeware |
How to extract: | Download the ZIP package and extract to a folder of your choice. Launch ESEDatabaseView.exe. |
What's new? |
|
Latest comments |
Midas
on 2013-01-15 12:17
In case (like me) you're left wondering what is this good for, here's a quote from the Wikipedia relevant article:
MIKLO
on 2017-01-04 16:36
Add comment
3›
Well that sure clears that up lol, but really like many apps a user has a need and finds a solution that works for them and then passes along their work for others to freely use. In my mind that's the way its supposed to be. |
Detect It Easy (DIE) is a packer identifier in order to help define a file type. Comes in handy to analyze a file, determine its type and packer.
Category: | |
Runs on: | WinXP / Vista / Win7 / Win8 / Win10 |
Writes settings to: | Application folder |
Stealth: ? | No. HKCU\Software\QtProject |
Unicode support: | Yes |
License: | MIT License |
How to extract: | Download the "portable" ZIP package and extract to a folder of your choice. Launch die.exe. |
What's new? | See: https://github.com/horsicq/Detect-It-Easy/blob/master/changelog.txt |
Latest comments |
juverax
on 2018-08-04 09:27
Add comment
2›
Detect It Easyv2.00 |
PropertySystemView allows you view and modify the properties of file from GUI and command-line, using the property system of Windows operating system. For example, you can change the 'Media Created' timestamp stored in .mp4 files (System.Media.DateEncoded) as well as other metadata stored in media files and office documents, like Title, Comments, Authors, Tags, Date Acquired, Last Saved Date, Content Created Date, Date Imported, Date Taken (EXIF of .jpg files), and more.
PropertySystemView also allows you to set properties of Windows. For example, you can set the System.AppUserModel.ID property of a window in order to disable the taskbar grouping of the specified window.
Category: | |
Runs on: | Vista / Win7 / Win8 / Win10 |
Writes settings to: | Application folder |
Unicode support: | Yes |
License: | Freeware |
How to extract: | Download the ZIP package and extract to a folder of your choice. Launch PropertySystemView.exe. |
What's new? |
|
OpenSaveFilesView displays the list of files that you previously opened with the standard Windows open/save dialog-box. The program shows a variety of details including filename, extension, order (the order that the files were opened for every file extension), open time (available only for the last opened file of every file type), file modified/created time, file size and file attributes.
Category: | |
Runs on: | Win2K / WinXP / Vista / Win7 / Win8 / Win10 |
Writes settings to: | Application folder |
Stealth: ? | Yes |
License: | Freeware |
How to extract: | Download the ZIP package and extract to a folder of your choice. Launch OpenSaveFilesView.exe. |
What's new? |
|
Latest comments | Add comment 2› |