Inspect your applications before they start!

Take a new look at your applications with the free tool presented here!

Whether you like this view:

Classic View

Or you might prefer this view:

XML View

PeStudio helps you to discover many security relevant details about any application and library without starting them, like:

  • whether anonymous functions are exported
  • whether obsolete functions are imported
  • whether Data Execution Prevention (DEP) will be used
  • whether Address Space Layout Randomization (ASLR) is used
  • whether Structured Exception Handling (SEH) is used
  • whether an application is 64-Bit capable
  • whether unused bytes (Caves) are available
  • whether Structured Storage is used
  • whether an HTTP connection will be made
  • whether the file is obfuscated (encrypted, compressed)
  • and many more details...

You can download PeStudio (Version 3.54 - updated: 19 December 2011) as a ZIP file for free.

PeStudio is based on our own library PeParser which is also part of the package.

The application presented has been completely designed, implemented and tested by me and is made available «as is». No responsability can be taken for its use.

© 2011 Marc Ochsenmeier - Email: info@winitor.com