Repository navigation
Highlights
- Breaking change:
exowin-cli.exeno longer launches the GUI. Use the dedicatedexowin-gui.exebuild to start the graphical interface. - DLL-specific analysis: added export analysis, DLL type detection, DLL hijacking heuristics, and suspicious-export detection.
- Disassembly: Capstone-based entry-point disassembly kept; disassembly visibility controlled via CLI options.
- Expanded ML support: unified EXE/DLL feature extractor now produces 181 numerical features for ML workflows.
- CLI overhaul: simplified and consolidated commands — notable commands include
analyze,compare,extract-features,list-features, andversion. - Improved batch processing, recursive folder analysis, and clearer single-file vs. batch extraction flows.
extract-featuressupports labels and appending to existing CSVs. - Reports & export: improved JSON, HTML (interactive), Markdown, CSV outputs; console output enhanced with Rich formatting.
- Documentation: README updated to reflect new features, command examples, and feature lists.
Notes
- If you relied on launching the GUI from the CLI binary, run the GUI directly from source (python
gui.py) or rebuild the CLI binary with the GUI feature enabled. - Verify SHA256 after download.
- For full details, see the commit and README changes included in this release.
Full Changelog: 1.1.0