Skilled PE Explorer 1.08 – Software program opinions,

Skilled PE Explorer is a tiny free instrument for investigating executable information: EXE, DLL, SYS, SCR, OCX and extra.

Drag and drop the suspect file, potential malware or no matter else onto this system and a left-hand tree lists a few of its constructions: DOS Header, NT Header, Part Headers, assorted listing entries and extra.

You are in a position to edit sections, view entropy and MD5 calculations, dump parts of the file, even browse it in depth with a built-in hex editor.

Whereas that is aimed toward consultants, there are parts right here that might be useful to anybody.

NT Header > File Header tells you whether or not this can be a 32 or 64-bit EXE.

NT Header > Non-compulsory Header has an merchandise indicating whether or not it is a GUI or console program.

If the EXE has a digital signature then a DIRECTORY_ENTRY_SECURITY part provides you particulars on its title, date and extra. (This depends on the Home windows API however ought to nonetheless work simply wonderful in most conditions.)

Typically there is a DIRECTORY_ENTRY_DEBUG part which exhibits you when the EXE was compiled, and its location on the developer’s laborious drive.

A “Strings in file” part locates strings of characters within the file and organises them into 4 classes: ASCII, Unicode, URL and Registry.

Proper-clicking any merchandise shows an choice to seek for it in Google or MSDN.