MikAlyzer
2024-09-12, 15:29
I have a file named "SAMPLE.exe". As soon as I select the PE Sections tab in FileAlyzer 2.0.5.57, a file named "SAMPLE.exe.color" is added to the file system. I find this somewhat concerning. At first, I thought that the .exe was being executed by FileAlyzer, and the alarm bells started ringing... Then I reproduced this in a VM, and noticed that it happens when selecting "PE Sections".
Should writing to the file system not be off by default, especially on an app where security tends to come first? Or am I missing something?
Should writing to the file system not be off by default, especially on an app where security tends to come first? Or am I missing something?