Results 1 to 2 of 2

Thread: FileAlyzer creates .color file

  1. #1
    Junior Member
    Join Date
    Sep 2024
    Posts
    1

    Default FileAlyzer creates .color file

    I have a file named "SAMPLE.exe". As soon as I select the PE Sections tab in FileAlyzer 2.0.5.57, a file named "SAMPLE.exe.color" is added to the file system. I find this somewhat concerning. At first, I thought that the .exe was being executed by FileAlyzer, and the alarm bells started ringing... Then I reproduced this in a VM, and noticed that it happens when selecting "PE Sections".

    Should writing to the file system not be off by default, especially on an app where security tends to come first? Or am I missing something?

  2. #2
    Member of Team Spybot (m/f)'s Avatar
    Join Date
    Feb 2006
    Posts
    299

    Default

    Your observations are correct. The file is created when analyzing the sections of a file. The Sample.colors file contains just a few strings and is absolutely harmless, it can be deleted after analysis. Nonetheless, we consider deleting it after analysis automatically. This might be a feature in a new version.
    (m/f)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •