PeStudio

[fluid]

PeStudio 7.73

Extended validation of Debug fields
Extended PeStudioIndicators.xml
Added Context Menu at the image level
Added Certificates validity handling
Added Indicator Id in the output XML report

PeStudio 7.74

Added detection of GINA
Extended Directories Validation
Added Valid, Missing, Empty fields for Directories
Extended PeStudioBlackListLibraries.xml
Extended PeStudioIndicators.xml

Spoiler: pokaż

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[fluid]

PeStudio 7.75

Fixed a bug with the Exported Symbols of 64 bit Images

Spoiler: pokaż

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[fluid]

PeStudio 7.76

Added PeStudioOrdinals.xml to map Imported Ordinals to their original Function Names

Spoiler: pokaż

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[fluid]

PeStudio 7.77

Added Detection and Indicator for MIME64 Encoding string
Added Detection and Indicator for hard-coded IP Adresses

Spoiler: pokaż

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[fluid]

PeStudio 7.78

Added Detection and Indicator for ComSpec
Added Correlation between strings and imported Symbols

PeStudio 7.79

Corrected Imported Functions names for 64bit images
Added Correlation between strings and imported Libraries
Extended PeStudioTranslations.xml

Spoiler: pokaż

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[fluid]

PeStudio 7.80

Extended Blacklist of Libraries
Map dynamically loaded libraries to the content of PeStudioBlackListLibraries.xml
Map dynamically loaded functions to the content of PeStudioBlackListFunctions.xml

Spoiler: pokaż

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[fluid]

PeStudio 7.81

Added PeStudioBlackLanguages.XML to support detection of Resources Blacklisted Languages

Spoiler: pokaż

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[fluid]

PeStudio 7.82

Consolidated Indicators about blacklisted Resources Languages
Show the Resources Tree leaf in Red when a Resource Language has been detected as Blacklisted

Spoiler: pokaż

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[fluid]

PeStudio 7.83

Extended PeStudioBlackListFunctions.xml
Added Tag in PeStudioBlackListStrings.xml to hide the strings that are Imported Libraries (with the goal to concentrate on strings that really matter)

PeStudio 7.84

Better detection of hard-coded IP Addresses
Added Tag in PeStudioBlackListStrings.xml to hide the strings that are Imported Libraries (with the goal to concentrate on strings that really matter)

Spoiler: pokaż

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[fluid]

PeStudio 7.85

Extended detection of suspicious debugger fields (invalid content - e.g.: flame)
Added PeStudioFunctionsMapping.XML to map Function Names (e.g. SystemFunction036 to RtlGenRandom )

Spoiler: pokaż

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[fluid]

PeStudio 7.86

Added Support for Sections -> Context Menu -> Dump
Added Support for Dumping ICO as RAW and ICO.file format

PeStudio 7.87

Extended detection of embedded IP Addresses
Extended malicious usage of Resource Icons
Added new Indicator for suspicious Resource Icons

Spoiler: pokaż

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[fluid]

PeStudio 7.88

Added detection of signature for the Resources

Spoiler: pokaż

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[fluid]

PeStudio 7.89

Extended anomalies detection of File Version Information fields

Spoiler: pokaż

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[fluid]

PeStudio 7.90

Extended detection of fake and missing fields in the File Version Information block
Show more fields of Version Information block
Added new Indicators

Spoiler: pokaż

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[fluid]

PeStudio 7.91

Extended PeStudioBlackListFunctions.xml
Fixed a bug when creating the XML report file

Spoiler: pokaż

Zaloguj lub Zarejestruj się aby zobaczyć!