It can also reveal files' references and bind imports. It can also reveal the results of VirusTotal scans and hard-coded IP addresses. It also has a comprehensive report on how executable files are constructed, as well as information about their signatures, sections, headers, and other information. PeStudio is not just limited to finding suspicious executable files. Furthermore, this program is portable and doesn't require installation, making it ideal for private use. It works on all Windows versions and won't modify the operating system's registries. If you're curious about the endianness of your samples, PeStudio will tell you! This tool uses a powerful parser to analyze XML configuration files. It also offers a graphical user interface (GUI), command line version, and more than two dozen checks. This freeware application is available for download to all Windows users, and contains no strings attached.

It's a useful program for security professionals, novice users, and students alike. PeStudio is a program for discovering malicious code, and locating and removing the infected files from your computer.

Pestudio portable