RSS Feeds

Receive a regular RSS feed from our latest, most popular and recommended downloads

Latest downloads feed

Get a regular RSS from our most latest downloads

Most popular downloads feed

Get a regular RSS from our most popular downloads

Recommended downloads feed

Get a regular RSS from our recommended downloads

Newsletter

Subscribe to either one of our two newsletters for regular updates and information

Downloads newsletter

This is a weekly newsletter with download news, updates and other information

This is a monthly newsletter with software store information, offers and deals

PeStudio 8.81

Analyse any Windows executable for signs of malware

by Mike Williams

Our Rating:
Your Rating:
Login to rate
Based on 1 ratings
License: Freeware
Operating Systems: Windows 10, Windows 7 (32 bit), Windows 7 (64 bit), Windows 8, Windows Server, Windows Vista (32 bit), Windows Vista (64 bit), Windows XP
Requirements:
Languages: English
Software Cost: Free
Date Updated: 13 August 2018
Watchlist: Add download to my watchlist
Downloads To Date: 4663
Developer: Marc Ochsenmeier
RSS News Feed:
Twitter Feed: https://twitter.com/ochsenmeier
Safeguard your PC with Malwarebytes 3.0 Premium for only $29.99, saving 50% from store.downloadcrew.com
PeStudio
Analyse any Windows executable for signs of malware

PeStudio is a free and portable tool which uses static analysis (and other techniques) to help you discover more about suspicious applications. The program is aimed squarely at developers and Windows experts, but don't let that put you off - there are features here which everyone can use and understand.

Getting started, for instance, is as easy as dragging and dropping a program onto PeStudio. A detailed report appears almost immediately, and the first Indicators tab delivers plenty of useful information. Is it digitally signed, for instance? Targeted at 32 or 64-bit processors? Does it need administrative permission? And there are details about ASLR, DEP, SafeSEH, resources and more.

Clicking the Strings tab will then reveal any embedded text strings in the program - function names, paths, prompts, web addresses and more - which can be a useful way to figure out what it's doing. (Malware will usually employ various tricks to hide this kind of information, but it's still worth a try.)

The Libraries and Imports tabs show you the DLLs and other support files required by your program, and the functions it's using.

The Resources tab will list structures embedded within your program (typically icons, bitmaps, dialogs and so on).

Usefully, clicking Indicators > VirusTotal Scan Report will tell you whether any of the VirusTotal antivirus engines (46, as we write) thinks the executable is malware.

And PeStudio even comes with command line support, which means you can automate its analysis and check a host of files in a single operation.

What's new in 8.81 (see changelog for more)?
- Add search google for strings view
- Show details of virustotal report

Verdict:

A nicely balanced malware analysis tool, PeStudio has some useful features for regular users, while also providing the more in-depth details experts need

Your Comments & Opinion
 
Related Download Articles
 
EXE Explorer

EXE Explorer 1.5.1

Freeware

Uncover the innards of executable files with this powerful programmer's tool

NPE File Analyzer 1.1.2.1

NPE File Analyzer 1.1.2.1

Freeware

Examine, edit and analyse both 32 and 64-bit Portable Executable (PE) files

Exeinfo PE

Exeinfo PE 0.0.4.3

Open Source

Find out more about EXE (and other) files

MZreveal

MZreveal 1.11

Freeware

Search for disguised executables

Other Download Articles From This Category
Avira Antivirus Pro 2019

Avira Antivirus Pro 2019 v15.0.41.77

Trial Software

Capable virus protection - and that's just the start

Avira Internet Security Suite 2019

Avira Internet Security Suite 2019 v15.0.41.77

Trial Software

Protect and maintain your PC with Avira's latest security suite

Avira Free AntiVirus 2019

Avira Free AntiVirus 2019 v15.0.41.77

Free, for personal-use only

Keep your PC safe from malware with Avira's latest release

McAfee Avert Stinger (64-bit)

McAfee Avert Stinger 12.1.0.2920 (64-bit)

Freeware

Seek out and destroy the most common malware with a click

From Softwarecrew

Please wait while my feed loads

See more posts...

Our Price: $19.95
RRP: $49.99
Saving 60%
Buy Now
Offer Ends In:
 

Spotlight: Free Full Software

Windows 10 October 2018 Update (build 1809)

Free Full Commercial Software

This is the latest version of Windows October 2018 Update. it's a media creation tool that can be used to upgrade an existing installation of Windows or create installation media for another PC. Just make your choice after launching the tool and it'll do the rest.

What was new in Windows 10, when it was released? The OS brought back the Start Menu, though with a Windows 8 twist: live tiles keep you up-to-date with the latest news while also providing an easy way to launch apps. (Don't worry if you prefer the Start Screen, it's still there and you can boot into it if you prefer.)

Apps now work much more like regular desktop programs. They have minimise, maximise, restore and close buttons, and can be resized (to a degree) and organised however you like.

If you've still lost track of a program in the mass of open windows, a new Task Spaces feature can help. Click its taskbar button and you'll see thumbnails for everything running now, a little like OS X's Mission Control - just click something to switch to it.

Better still, Task Spaces also supports virtual desktops. Add extra desktops as required and it'll display thumbnails of each one, making it easy to identify whatever you're after and switch to it.

There's also smarter snapping, new customisation options, and even a bunch of experimental additions to the command prompt.

Fall Creators Update brings a whole host of new features for Windows 10. See the Microsoft Blog for more information.

The Windows 10 ISO here will give you build 1809 which is the October 2018 Update.

[...]
Value:
Free
Rating: