About PEScan and 4n4lDetector Pro
What is PEScan and how is it related to 4n4lDetector Pro?
PEScan is a web-based static analysis tool for Windows executable files
(PE: .exe, .dll, .sys,
.ocx, .scr, .drv,
.cpl).
It allows for detailed examination of files without executing them,
helping to identify potentially malicious code.
4n4lDetector Pro is the foundation of PEScan, a desktop tool for Windows
with over 10 years of development, featuring advanced malware detection
and analysis techniques.
Supported File Types
What types of files does PEScan support?
PEScan is primarily designed to analyze
Windows Portable Executable (PE) files, such as
.exe, .dll, .sys,
.ocx, .scr, .drv, and
.cpl.
The tool not only identifies the file type but also extracts detailed
information from headers, sections, strings, and metadata, providing
a comprehensive analysis of each file.
What types of files does 4n4lDetector Pro support?
4n4lDetector Pro can analyze any type of file without format restrictions. Its analysis engine allows the inspection of non-standard data, including embedded or hidden executable structures within binary files. Additionally, it can extract executable files from shellcodes and perform deep string-based analysis to uncover potential malicious content in arbitrary data or packed samples.
Detection and Analysis Features
What detection features are offered?
4n4lDetector Pro provides static and detailed analysis
of Windows Portable Executable (PE) files, allowing inspection of
headers, sections, strings, metadata, and more.
It offers extensive configuration options to enable or disable analysis
functions as needed, giving full control over how analyses are executed.
Parameters can be manually adjusted to suit different file types
or scenarios.
For more information, visit:
4n4lDetector Pro.
The online platform PEScan.io includes most of these
capabilities, adapted and optimized for web-based analysis,
allowing users to perform fast and comprehensive scans directly from
their browser.
For more information, visit:
PEScan.io information.
Privacy and Data Handling
Is my uploaded file stored or shared publicly?
PEScan.io is designed with user privacy as a priority and processes uploaded files in a secure, isolated environment. Uploaded samples are not published publicly or submitted to antivirus companies. Some samples may be retained internally as reviewable files to help improve the service's analysis and detection capabilities. Please avoid uploading files that contain confidential or sensitive information unless you are authorized to do so.
Analysis links and user codes may be used to retrieve existing results. Avoid including personal or confidential information in files submitted for analysis.
Security and Sandboxing
Does PEScan execute the files during analysis?
No. Both PEScan and 4n4lDetector Pro perform static analysis, which means the analyzed files are not executed or emulated during inspection. Because the files are not executed or emulated, the analysis substantially reduces the risk of infection from the sample. As with any software that processes untrusted files, no tool can guarantee zero risk in every circumstance. Analyses are conducted through internal data parsing and string-level inspection.
Professional Use
Can PEScan be used in professional environments?
Yes. Both PEScan and 4n4lDetector Pro are suitable for professional use. PEScan provides an online analysis environment, ideal for remote or on-demand inspection of samples. 4n4lDetector Pro, on the other hand, allows detailed offline analysis of large or multiple files, making it an excellent choice for research labs, analysts, and malware hunters.
Can I analyze large or multiple files at once?
4n4lDetector Pro is optimized to handle very large files (tens of MB) and multiple samples simultaneously, leveraging local system resources. It provides flexibility for professional environments that require batch processing or analysis of complex samples. In comparison, PEScan.io offers a more limited experience in this regard, focused on quick and efficient online analysis.
Licensing Information
How do I obtain a 4n4lDetector Pro license?
It is important to distinguish between PEScan.io Codes and 4n4lDetector Pro licenses:
- PEScan.io Codes: allow full analyses, YARA rule generation, and private analyses from the online platform.
- 4n4lDetector Pro licenses: are for the Windows desktop version and are purchased through the website. After payment, a license file is issued. The license is activated via email.
Usage Requirements
Is prior malware analysis experience required?
Not mandatory, but basic knowledge of Windows executable files and malware concepts is recommended. The interface provides clear results that beginners can interpret with some guidance.
Is the analysis safe for my system?
Both PEScan and 4n4lDetector Pro perform static analysis without intentionally executing the analyzed code. This reduces the risk associated with inspecting potentially malicious files, although no software can guarantee zero risk in every circumstance. PEScan is online and allows quick analysis from anywhere, while 4n4lDetector Pro is a Windows desktop version with advanced functions and detailed analysis.
Online vs Desktop Versions
What advantages does the desktop version have over the online version?
4n4lDetector Pro is more versatile and configurable, allowing greater control over rules and analysis options. Analyses are performed locally, so files do not need to be uploaded to an online analysis service.
Can YARA rules be generated with both tools?
Yes, YARA rules can be generated for analyzed files in both PEScan and 4n4lDetector Pro.
Can I keep my analyses private on PEScan?
PEScan uses analysis links and user codes to retrieve existing results. Save the analysis link or retain the analyzed sample for future reference, as submitting the same sample again with your user code may redirect you to the existing analysis.
System Requirements and Limits
Which operating systems does 4n4lDetector Pro support?
4n4lDetector Pro is compatible with Windows 7, 8, 10, and 11.
Are there file size or file number limits per analysis?
On PEScan.io, the current file size limit is 16 MB. In 4n4lDetector Pro, files up to 99 MB can be analyzed, depending on file characteristics.
Updates and Maintenance
How are 4n4lDetector Pro updates managed?
During the license period, users have access to updates via email and can download the latest version as new improvements are released. The same email is also useful for receiving the analysis code if the user has selected the Premium analysis option on PEScan.io, ensuring proper delivery and identification of the user's analyses.
Can analysis results be exported?
On the web platform, analysis links can be shared, while 4n4lDetector Pro allows reports to be stored locally.
Support and Integration
What type of technical support is provided for 4n4lDetector Pro users?
Technical support is limited to using the software on the licensed operating system, providing assistance with installation and operation within compatible environments.
Can 4n4lDetector Pro be integrated into automated workflows?
Integration into automated workflows can be arranged upon prior consultation with the tool developer.
How can I report issues, request new features, or ask questions?
You can contact official support at gsanchez@enelpc.com. This email address is available for questions, technical issues, and feature requests related to both PEScan.io and 4n4lDetector Pro. All inquiries are reviewed and prioritized based on their impact and relevance. For any inquiries, please allow up to 48 hours for a response.
4n4lDetector and PEScan.io
Take a look at 4n4lDetector and PEScan.io through an informal, hacker-oriented talk held in Seville, Spain, in 2025. The presentation offers a practical introduction to both projects in a relaxed setting, away from the usual corporate presentations. Please note that the slides are available in Spanish only. You can view the presentation in PDF format directly in your browser or download it for later reference.