PDA

View Full Version : FileAlyzer creates .color file



MikAlyzer
2024-09-12, 15:29
I have a file named "SAMPLE.exe". As soon as I select the PE Sections tab in FileAlyzer 2.0.5.57, a file named "SAMPLE.exe.color" is added to the file system. I find this somewhat concerning. At first, I thought that the .exe was being executed by FileAlyzer, and the alarm bells started ringing... Then I reproduced this in a VM, and noticed that it happens when selecting "PE Sections".

Should writing to the file system not be off by default, especially on an app where security tends to come first? Or am I missing something?

(m/f)
2024-09-16, 11:48
Your observations are correct. The file is created when analyzing the sections of a file. The Sample.colors file contains just a few strings and is absolutely harmless, it can be deleted after analysis. Nonetheless, we consider deleting it after analysis automatically. This might be a feature in a new version.