Adlice PEViewer (RogueKillerPE) v3.2.0.0 Multilingual-P2P
Description: Adlice PEViewer (RogueKillerPE) is a PE analyzer software, helping during malware analysis. PEViewer is able to inspect a file on disk or (running) process memory and classify the sample using various modules based on artificial intelligence, 3rd party services and built-in heuristic rules.
Features:
- Open PE from file, and read disk image.
- Open PE from process, and read memory or disk image.
- Open file from command line.
- Drag and drop support.
- Explorer context menu integration.
- Process general information (pid, parent, …)
- File general information (attributes, size, …)
- Process module general information (address, size, …)
- Many different hashes (MD5, SHA1, SHA256, IMPHASH, …)
- Process memory pages, with ability to dump.
- Injected pages detection, non-readable pages detection.
- Ability to dump injected pages to file.
- Hex code, with ability to search (hex values, or string ANSI/UNICODE).
- Assembly code, with ability to navigate.
- PE Headers (MZ, PE, Optional, …)
- RunPE detection, shows which header fields are modified.
- Checksum validation.
- PE Sections, with ability to watch hex code and dump to file.
- PE Debug, with ability to watch hex code and dump to file.
- PE Imports, with ability to watch APIs assembly code (memory only).
- PE Exports, with ability to watch APIs assembly code.
- Hooks detection in imports/exports (table and inline hooks).
- PE Resources. Able to parse all well known types and display them accordingly (strings, version information, icons, …)
- Ability to scan resources, sections, debug on VirusTotal.
- Executable files detection in resources.
- Ability to watch hex code of resources.
- Ability to dump resources to file.
- PDB path detection.
- Strings scanner, with classification (Registry, files, …)
- Ability to dump all strings (by category or not) to file.
- Bin2Img (binary to image).
- Digital Signature parsing (embedded only).
- Bright or dark theme.
- Samples Comparator (Premium).
- Sample Scoring.
- Maliciousness Indicators.
- VirusTotal full information.
Release Name: Adlice PEViewer (RogueKillerPE) v3.2.0.0 Multilingual-P2P
Size: 56.8 Mb
Links: HOMEPAGE – NFO – Torrent Search
Download: UPLOADGiG – NiTROFLARE – RAPiDGATOR