Anyone using PeStudio by Winitor?

PeStudio - http://winitor.com/

 

Thanks I just tried it & it worked fine

Quite useful in many ways

What do you make of it ?

 

I haven't tried it yet, but basing it off of what you just said...I'm going to give it a go.

I'll post my opinion on it soon.

 

Ok, I'm back with my opinion.

No complaints

Very useful tool, Leaving it on my machine

 

Hello,

I am the author of PeStudio. Thanks for using this tool! Don't hesitate to contact me (email address available at www.winitor.com) directly when needed (bug, request feature....)

PeStudio is still under construction and is also on Twitter: https://twitter.com/ochsenmeier

Thanks

 

I have been using it for the past couple of weeks as a replacement for CFF. Unless you need to actually edit the PE file and don't just want to take a look at it, PE Studio is the more convenient to use tool in my opinion.

Plus, Marc is a great guy and fast to implement new suggestions and fix bugs. That's always a plus .

 

Great addition, thanks all for info

 

What a neat piece of software. I'll be sure to try it out!

 

Thank you Mox for joining us here at the forums, I'm excited to see what you got planned for future versions.

 

PeStudio has been updated:

. Add detection of Embedded Executable Files Outside the Resources
. Differentiate between Embedded Executable Files inside and outside the Resources and show these as Indicators

 

Version 6.94
There is a bug in the XML file reports within <Character_set> of <version_information> that corrupts the XML file.
e.g. This is reported as the character set (hex)

Code:

e5 84 90 ce bf ec 87 98 36 e5 84 90 ce bf 00 00 ec 87 98 36 e8 b4 8f e7 82 80 e5 84 a0 ce bf ec 86 b0 36 34 00 ea a8 a0 e0 be 89 ec 87 ac 36 e3 8a bf e7 82 84 ec 86 b0 36

Either unchecking version information or editing out the character set allows the file to display correctly.

 

I just tried it and I like the software. My only problem is that it wants to connect to VirusTotal without asking me, and after I deny it, the interface locks completely until connection attempt time-out.

 

thanks for using PeStudio! I'll have a look about a confirmation to VT URL...

 

@Nebulus: what about an INI file (or an XML) file to control how PeStudio acts? (e.g. establish a connection to VT...)

 

@stackz: thanks for reporting the XML malformation. The XML file is on my TODO list!

 

@stackz: XML report malformation has been fixed and will be available with PeStudio 6.96 soon

 

I'll try it in the next couple of days.
Off topic:TyRidian,what happened to your old username?

 

Nice work! I'll be looking forward to it as well as future releases.

 

@stakz: thanks! I am preparing an XML schema for the XML report.

 

It is a good idea. For me, there is no need for an interface based option, and because nobody else seemed to mind, I think that an XML file is enough

 

What is CFF?

 

http://ntcore.com/exsuite.php

 

@stackz: PeStudio 6.96 is now available at www.winitor.com and corrects (among other new features) the malformation of the XML report file created

 

Thank you.

 

OK, next version will have a PeStudioSettings.xml file.