I am looking for software, which helps with forensic analysis of .exe-files, especially, if the analysied file

  • modifies the registry
  • creates, modifies or deletes other files
  • opens network connections
  • starts threads or processes

Since i am just doing this as a hobby, i am not willing to spend money on the software. So far i only know PEstudio, which is not bad, but has not that many functions. I am thankful for any recommendations.

1 Answer 1


I would use CAINE (Computer Aided Investigative Environment)

CAINE offers a complete forensic environment that is organized to integrate existing software tools as software modules and to provide a friendly graphical interface.

You can install it on a USB stick or on a Virtual Machine.

  • thanks, i will take a look into it. looks promising
    – ex6tenCe
    Dec 22, 2021 at 11:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.