.exe build - v.02

PyInstaller-built Windows x64 executable for PE Injection Scanner v.02, retaining the UAC administrator manifest.

• Corrected Prefetch format handling, bounded parsing/decompression, and corruption checks, including independent SCCA output-length validation.
• Provenance-aware JSON schema v2 and passive analysis of supplied Sysmon events 8, 10, and 25. Findings use cautious evidence labels: Prefetch anomalies alone do not prove injection or process hollowing.
• All five CI jobs passed, including benign native Windows MAM decompression and actual executable fixtures. No malware corpus or live incident was validated.
• The executable keeps the previous filename; the accompanying .sha256 file records its checksum.

Potential antivirus false positives may occur with PyInstaller-packaged executables. Investigate warnings rather than bypassing security controls.

Full Changelog: v.01...v.02

Companion licences and third-party notices: download pe_injection_scan-v.02-notices.zip alongside the executable and retain it when redistributing. The executable and source tag are unchanged. This package preserves the project MIT licence, Python Windows conditions, PyInstaller exception and bundled native-component notices; Microsoft runtime terms remain separate from the project licence.