PE Detective
 

PE Detective 1.2.1.1

PE Detective : A simple, easy to use PE identifier



PE Detective can scan single PE files or entire directories (also recursevely) and generate complete reports.The PE Detective is deployed along with the Signature Explorer, which is an advanced signature manager to check collisions, handle, update and retrieve signatures.To scan a file is very easy with the PE Detective tool: just drag and drop a file on the interface and press scan. If PE Detective finds multiple results, all of them will be listed in descending priority.The data for each result shows the signature name, the number of matches (meaning how many bytes in the signature match, wildcards aren't counted) and possible comments regarding the signature.It's, also, possible to perform a directory scan through the PE Detective. This means that every file in that directory will be scanned and listed in the results. The scan can be performed recursevely. As you can see, through the pop-up menu you can generate a complete report of the scanning session.The PE Detective comes along with the Signature Explorer, an advanced signature manager. This manager can open a signature database (there's one for each supported platform and a platform independent dabatase) and add, modify and delete its signatures. Entire PE Signatures are only used when the Deep Scan option is enabled. Those kind of signatures are scanned through the entire PE.To retrieve new signatures to add to the database, there's a Signature Retriever utility. This utility retrieves common bytes (at a certain RVA and given a maximum signature lenght) of two or more applications. The default RVA is the application entrypoint.Update is an easy task. Through the update utility you can update the current loaded signature database online or from file. There's an option to show only not-already-existing signatures and you can still delete all the items you don't want to add to the database.The last utility provided by the Signature Explorer is a Collision Checker. Basically, it checks the current loaded database for collisions (meaning already existing signatures).The check can be done specifying various options. When the scan is completed, already existing signatures are showed in collision groups and each signature has a different colour depending on how it collides with the other signature in its collision group.You can also delete from the same interface all the signatures which you think of being redundant.

Conclusion

To conclude PE Detective works on Windows operating system(s) and can be easily downloaded using the below download link according to Freeware license. PE Detective download file is only 607 KB  in size.
PE Detective was filed under the System category and was reviewed in softlookup.com and receive 5/5 Score.
PE Detective has been tested by our team against viruses, spyware, adware, trojan, backdoors and was found to be 100% clean. We will recheck PE Detective when updated to assure that it remains clean.

PE Detective user Review

Please review PE Detective application and submit your comments below. We will collect all comments in an effort to determine whether the PE Detective software is reliable, perform as expected and deliver the promised features and functionalities.

Popularity 10/10 - Downloads - 59 - Score - 5/5

Softlookup.com 2023 - Privacy Policy



Category: System 
Publisher: Daniel Pistelli
Last Updated: 11/11/2023
Requirements: Not specified
License: Freeware
Operating system: Windows
Hits: 592
File size: 607 KB 
Price: Not specified


Leave A comment
Name: *
E-Mail: *
Comment: *