v0.6.7
版本发布时间: 2024-01-08 23:08:16
hasherezade/pe-bear最新发布版本:v0.7.1(2025-04-26 08:20:05)
BUGFIX
- Fixed parsing a PE header in file with oversized DOS stub ( Issue #41 )
- Fixed incorrectly decoded Timestamp for Borland IMAGE_RESOURCE_DIRECTORY ( Issue #42 )
- Fixed crashes on edit via hex editor. Stability improvements.
- Validate relocation block before parsing (skip invalid)
FEATURE
- Added Strings tab (displaying ANSI and Unicode strings)
- Search for defined binary patterns within a selected file
- Added detection if the loaded PE is a memory dump in a virtual format (and needs remapping)
- Added remapping of a file with one click (new button on the Sections' Tab toolbar): DEMO
WARNING: The Windows build with vs10 suffix is built with Qt4 (legacy) - in contrast to the other builds that are with Qt5 (recommended). It is prepared for the purpose of backward compatibility with old versions of Windows (i.e. XP).
1、 PE-bear_0.6.7_qt4_x86_win_vs10.zip 5.92MB
2、 PE-bear_0.6.7_qt5.14_x64_linux.tar.xz 912.61KB
3、 PE-bear_0.6.7_qt5.15_x64_linux.tar.xz 910.72KB
4、 PE-bear_0.6.7_qt5.15_x64_macos.app.zip 41.73MB
5、 PE-bear_0.6.7_x64_win_vs13.zip 8.88MB
6、 PE-bear_0.6.7_x64_win_vs19.zip 9.1MB
7、 PE-bear_0.6.7_x86_win_vs13.zip 7.58MB
8、 PE-bear_0.6.7_x86_win_vs19.zip 7.86MB