Explorer Suite is a package of utilities including a PE Editor called CFF Explorer and a process viewer. It is ground breaking work because NTCore’s package of utilities is fully .NET supported internally. In fact, it was developed for reverse engineers and programmers who have a lot of work that involves .NET metadata.
Because of the Explorer, PE Editing has become really easy. Its list of features should best be viewed online as it becomes so long you wouldn’t know how to use it all. In this impressive list you will find a memory dumper, Windows and Process viewers, Special .NET supported field descriptions and modifications. There are editors and there are utilities that tie in with scanner and document processing, with specific focus on signature adding and retrieving. You could also set up your CFF Explorer to generate any reports you may have a need for, making this a business sensible tool.
Some of its features are Process Viewer; Windows Viewer; PE and Memory Dumper; Special fields description and modification (.NET supported); Full support for PE32/64; PE Utilities; PE Rebuilder; Resource Editor (full support for Windows Vista icons); View and modification of .NET internal structures; Support in the Resource Editor for .NET resources; Hex Editor; Import Adder; PE integrity checks.
Then there is a list of smaller utilities. Utilities such as these mainly take the form of add-ons to the main utilities. Here you have registry managers, files managers and a number of patches. This program seems quite complex. It seems more aimed at the computer savvy then on the newbie who just likes to toggle on his PC. But the functions on offer are clearly tools that we can barely do without, even when doing less critical work.
If you want to see processes in a x64 or Itanium machine, you have to download the proper version from the developer's site.
Comments