https://www.peparser.com/en/blog Latest from Blog en Tue, 29 Sep 2026 13:58:24 GMT https://www.peparser.com/en/blog/analyze-exe-dll-in-browser https://www.peparser.com/en/blog/analyze-exe-dll-in-browser Step-by-step static triage of Windows executables with the free PE Parser: load files or a ZIP, read indicators, compare builds and export results. Florian Amette Sun, 27 Sep 2026 00:00:00 GMT https://www.peparser.com/en/blog/collect-suspicious-executables-safely https://www.peparser.com/en/blog/collect-suspicious-executables-safely Find and copy suspicious EXE, DLL and SYS files from a Windows host or image without running them: PowerShell, Velociraptor, disk images and pitfalls. Florian Amette Sat, 26 Sep 2026 00:00:00 GMT https://www.peparser.com/en/blog/detect-packed-executables-upx-entropy https://www.peparser.com/en/blog/detect-packed-executables-upx-entropy Static signs that a Windows executable is packed or protected — section names, entropy, W+X sections, entry point, imports, overlay — and their pitfalls. Florian Amette Fri, 25 Sep 2026 00:00:00 GMT https://www.peparser.com/en/blog/pe-timestamps-compile-time-forensics https://www.peparser.com/en/blog/pe-timestamps-compile-time-forensics Where a Windows executable stores its times, which ones can be trusted, how reproducible builds and timestomping show up, and how to use them. Florian Amette Thu, 24 Sep 2026 00:00:00 GMT https://www.peparser.com/en/blog/authenticode-signature-verification-offline https://www.peparser.com/en/blog/authenticode-signature-verification-offline How Authenticode signs a PE file, which checks can be done from the file alone, and why a valid signature is not the same as a trusted one. Florian Amette Wed, 23 Sep 2026 00:00:00 GMT https://www.peparser.com/en/blog/imphash-rich-header-tlsh-malware-clustering https://www.peparser.com/en/blog/imphash-rich-header-tlsh-malware-clustering How imphash, the Rich header hash and TLSH group related Windows executables, how each is computed, and where each one breaks down. Florian Amette Tue, 22 Sep 2026 00:00:00 GMT https://www.peparser.com/en/blog/pe-file-format-forensics-guide https://www.peparser.com/en/blog/pe-file-format-forensics-guide What matters in a Windows PE file when you triage a suspicious EXE, DLL or driver: headers, sections, imports, resources, signature and overlay. Florian Amette Sun, 20 Sep 2026 00:00:00 GMT