Categories /

Files - Miscellaneous (35)

pestudio v8.73 Updated

billon on 5 Feb 2018
  • 4MB (uncompressed)
  • Released on 4 Feb 2018
  • Suggested by joby_toss

pestudio shows details about applications and other system files (.exe, .dll, .cpl, ocx, .ax, .sys etc.) without starting them including:

  • Libraries that are used by an application
  • Functions that are imported by an application
  • Functions (also anonymous) that are exported by an application
  • All functions that are forwarded to other libraries
  • Obsolete Functions that are exported and imported by an application
  • If Data Execution Prevention (DEP) Windows security mechanism is used
  • If Address Space Layout Randomization (ASLR) Windows security mechanism is used
  • If Windows security mechanism Structured Exception Handling (SEH) is used
  • Whether some sections are compressed

pestudio standard lacks some features of pro version, see comparison here (PDF file!).

Category:
System Requirements: Win2K / WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: None
Stealth: ? Yes
Unicode support: Yes
License: Freeware
How to extract: Download the ZIP package and extract to a folder of your choice. Delete AddToShell.reg and RemoveFromShell.reg. Launch pestudio.exe.
Similar/alternative apps: PPEE
What's new?
  • Add functions groups to the strings View.
  • Extend functions groups to the delay-loaded functions.
Latest comments
__philippe on 2017-11-26 12:10

PEstudio v8.70 - Link date 22-NOV-2017

v8.70 changelog:
. Expose the indicators id number in the output XML file
. Extend grouping of utilities
. Extend grouping of imports by types and colors

Midas on 2017-11-26 19:37

Like noted elsewhere, unless significant for the comment exchange, program changelogs are best posted to the forum topic (or entered at the appropriate field), my dear _phillipe. B-)

__philippe on 2017-11-26 21:39

All righty,... next time round,

the undersigned hereby pledge to abide by the recommendations, protocols,
procedures and regulations set forth by my Right Honourable Friend Midas,
the Member for TPFC's constituency,... cross my heart and hope to die... ;-)

__philippe

See all

MiTeC EXE Explorer v1.5.6 Updated

billon on 31 Jan 2018
  • 4MB (uncompressed)
  • Released on 31 Jan 2018
  • Suggested by juvera

MiTeC EXE Explorer reads and displays executable file properties and structure. It is compatible with PE32 (Portable Executable), PE32+ (64bit), NE (Windows 3.x New Executable) and VxD (Windows 9x Virtual Device Driver) file types, as well as .NET executables.

The program enumerates introduced classes, used units and forms for files compiled by Borland compilers. It contains powerfull Resource Viewer that is able to abalyze and display all basic resouce types and some extra ones as JPEG, PNG, GIF, AVI, REGISTRY and Type Library viewer that enumerates all objects and creates import interface unit in Object Pascal language. Every type of resource can be saved to file.

Program data can be output to a text report.

Category:
System Requirements: Win2K / WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: None
Stealth: ? Yes
Unicode support: Yes
License: Freeware
How to extract: Download the ZIP package and extract to a folder of your choice. Launch EXE.exe.
Similar/alternative apps: PPEE, pestudio
What's new?
  • Added AuthentiCode verification.
Latest comments
CornHolio the Gringo on 2018-02-06 16:21

All MiTeC software that I use, writes to registry.
MiTeC HexEdit 6.1.0
MiTeC Icon Explorer 4.2.0
MiTeC Mail Viewer 2.3.0
MiTeC Network Scanner 4.0

Therefore Ive used JauntePE060Nightly to make it true stealth.

CornHolio the Gringo on 2018-02-06 16:27

All MiTeC software that I use, writes to registry.
MiTeC HexEdit 6.1.0
MiTeC Icon Explorer 4.2.0
MiTeC Mail Viewer 2.3.0
MiTeC Network Scanner 4.0

Therefore Ive used JauntePE060Nightly to make it true stealth.

Add comment

ESEDatabaseView v1.60 Updated

billon on 29 Jan 2018
  • 140KB (uncompressed)
  • Released on 28 Jan 2018
  • Suggested by Checker

ESEDatabaseView reads and displays the data stored inside a database used by a variety of Microsoft programs known as Extensible Storage Engine (ESE) database (aka Jet Blue or a .edb file). It displays a list of all tables available in the opened database file, allows you to choose the desired table to view, and then when you choose a table, it displays all records found in the selected table.

The program also allows you to easily choose one or more records, and then export them into a variety of formats including CSV, HTML and XML, or copy and then paste them into a spreadsheet program.

Category:
System Requirements: Win2K / WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: Application folder
Stealth: ? Yes
Unicode support: Yes
License: Freeware
How to extract: Download the ZIP package and extract to a folder of your choice. Launch ESEDatabaseView.exe.
What's new?
  • Added:
    • 'Detect Ascii Strings In Binary Data' option. When it's turned on, ESEDatabaseView displays binary data as string if it detects that the binary data is Ascii string. This option is useful for cookies names and values (CookieEntryEx_XX tables) in the database of MS-Edge browser (WebCacheV01.dat);
    • 'Put Icon On Tray' option.
  • Fixed bug: on some tables ESEDatabaseView failed to read properly some of the fields.
Latest comments
Midas on 2013-01-15 12:17

In case (like me) you're left wondering what is this good for, here's a quote from the Wikipedia relevant article:

"ESE is notably a core of Microsoft Exchange Server and Active Directory. Its purpose is to allow applications to store and retrieve data via indexed and sequential access. Windows Mail and Desktop Search in the Windows Vista operating system also make use of ESE to store indexes and property information respectively."

http://en.wikipedia.org/wiki/Extensible_Storage_Engine

MIKLO on 2017-01-04 16:36

Well that sure clears that up lol, but really like many apps a user has a need and finds a solution that works for them and then passes along their work for others to freely use. In my mind that's the way its supposed to be.
MIKLO

Add comment

NonCompressibleFiles v2.71 Updated

billon on 14 Jan 2018
  • 72KB (uncompressed)
  • Released on 13 Jan 2018
  • Suggested by Checker

NonCompressibleFiles is a testing program that allows you to create on the fly one or more non-compressible files, or maximum compressible files. Can be used to test performance of compression programs, to find out if data transfer programs (such as FTP) are compressing the data, or test file behavior.

Category:
System Requirements: Win98 / WinME / WinNT / Win2K / WinXP / Vista / Win7 / Win8 / Win10
Writes settings to: Application folder
Stealth: ? Yes
Unicode support: Yes
License: Freeware
How to extract: Download the "Portable" ZIP package and extract to a folder of your choice. Launch NonCompressibleFiles.exe or NonCompressibleFiles_x64.exe.
What's new?
  • Speed optimization when create not compressible files for Intel and AMD processors.
  • Bug-Fix: When recognizing the default user language.
  • Improvements and adjustments as well as upgrade of the language files.

JumpListsView v1.15 Updated

billon on 27 Dec 2017
  • 144KB (uncompressed)
  • Released on 26 Dec 2017
  • Suggested by Checker

JumpListsView displays the information stored by the 'Jump Lists' feature available when you right-click on something in the task bar in Windows 7 - 10. For every record found, data available includes the filename that the user opened, the date/time, the ID of the application, the size/time/attributes of the file on the time that the file was opened etc.

You can also export the Jump Lists records to csv/tab-delimited/xml/html file.

Category:
System Requirements: Win7 / Win8 / Win10
Writes settings to: Application folder
Stealth: ? Yes
Unicode support: Yes
License: Freeware
How to extract: Download the ZIP package and extract to a folder of your choice. Launch JumpListsView.exe.
What's new? Added:
  • 'Application Name' column. JumpListsView searches the Application ID in JumpListsView_AppID.txt (located in the same folder of the .exe file) and if it finds the ID, the name of the application is displayed in the 'Application Name' column.
  • 'File Extension' column.
  • 'Align Numeric Columns To Right' option.