Adlice PEViewer (RogueKillerPE) Premium 3.2.0.0 Multilingual [Latest]

March 5, 2020

Adlice PEViewer (RogueKillerPE) Premium – is a software used by many researchers at Antivirus companies or CERT worldwide in order to perform malware static analysis.

Malicious software sometimes try to hide their goals to evade detection and static analysis. By doing so, they leave indicators, metadatas and suspicious modifications behind.

Adlice PEViewer searches and lists these artifacts to help researchers making up their mind on a suspicious file. The software uses robust PE parser as well as analysis engine and heuristics detections to build these indicators.

Features
• Open PE from file, and read disk image.
• Open PE from process, and read memory or disk image.
• Open file from command line.
• Drag and drop support.
• Explorer context menu integration.
• Process memory pages, with ability to dump.
• Injected pages detection, non-readable pages detection.
• Ability to dump injected pages to file.
• Hex code, with ability to search (hex values, or string ANSI/UNICODE).
• Assembly code, with ability to navigate.
• Checksum validation.
• PE Sections, with ability to watch hex code and dump to file.
• PE Debug, with ability to watch hex code and dump to file.
• Ability to scan resources, sections, debug on VirusTotal.
• Executable files detection in resources.
• Ability to watch hex code of resources.
• Ability to dump resources to file.
• PDB path detection.
• Bright or dark theme.
• Sample Scoring.
• Maliciousness Indicators.
• VirusTotal full information.
• and much more..