Become a Patron!

Investigate suspect EXEs with Professional PE Explorer

VUBot

Staff member
Diamond Contributor
ECF Refugee
Vape Media
Professional PE Explorer is a portable tool which allows investigating Windows executables including EXE files, SYS, DLL and more. The download is so tiny you’ll wonder if it’s broken -- 78.1KB, really? -- but no, this is all you get. Unzip it and run PPEE.exe to get started. Drag and drop a suspect file onto the program and a left-hand tree lists some of its structures: DOS Header, NT Header, Section Headers, assorted directory entries and more. If you’re happy with this low-level detail, you’ll also appreciate the program’s "anomaly detection", where unusual elements of the section are highlighted in… [Continue Reading]

tjogXYgxxqo


Continue reading...
 

VU Sponsors

Top