日本語English

EXE/DLL Info Viewer (PE Viewer)

Drop an .exe, .dll or .sys file to see its processor, build time, ASLR and DEP settings, section permissions and entropy, the DLLs and functions it imports, and its version info. The file is not run, and this is not a virus check. For the contents of XML or images, use another tool.

On-device・No uploadMobile friendlyWorks offline

Your files and input are processed only inside your browser on this device and are never uploaded to our servers.

EXE, DLL and SYS file

Drop an .exe, .dll or .sys file

or

Files are never run. Only the bytes are read, and only the parts needed, inside your browser (up to 200 MB).Accepts: EXE / DLL / SYSPaste (Ctrl+V) also works

The file is read only inside your browser. Nothing is sent to a server.

This tool is not a virus check and does not judge safety. Do not run a file from an untrusted source based on this result.

PE structure

Files are never run. Only the bytes are read, and only the parts needed, inside your browser (up to 200 MB).

How to use

  1. Drop an .exe, .dll or .sys file onto the frame, or choose it with "Choose file" (up to 200 MB).

  2. Check the Overview for the type (EXE, DLL or SYS), processor, format (PE32 or PE32+) and build time.

  3. Review the Things to note list for ASLR or DEP being off, sections that can be both written and executed, and high-entropy sections.

  4. See the DLLs and functions the file imports under Imports, and the function names it exports under Exports. Version info includes product and company names.

  5. To try it without a file, press "Try a sample". The tool builds a small PE in code and shows its structure.

What it does

Reads without running

The file is never run. The tool reads the DOS header, PE signature, COFF and optional headers, section table, imports, exports and version resource, reading only the parts it needs.

Checks ranges before reading

Offsets, RVAs and lengths are checked to lie inside the file before any read. A broken part is listed under "parts that could not be read", and the rest of the report still shows.

Security settings at a glance

From DllCharacteristics, shows ASLR (DYNAMIC_BASE), DEP (NX_COMPAT), CFG (GUARD_CF) and high-entropy ASLR. Also flags sections that can be both written and executed.

Entropy as a hint

Shows the Shannon entropy (0–8) of each section. A value of 7.2 or more is noted as a possible sign of compression, encryption or obfuscation, but not as a conclusion. Entropy is computed over the first 16 MB of each section.

Imports, exports and version info

Imports are listed per DLL with function names (up to 10,000). Exports show the names the DLL provides. Version info reads product name, file version, company and description.

Use cases

  • Check whether a downloaded exe is 32-bit or 64-bit, and which Windows processor it targets
  • See which DLLs a file loads and which functions a DLL exports, without running it
  • Check the build time, company and version of an internal tool
  • Find out whether an old executable uses ASLR and DEP
  • Spot sections that may be compressed or obfuscated from their entropy

Supported formats

Input

.exe (PE32 and PE32+).dll.sys (drivers)Other PE files (start with MZ and have a PE signature)

Output

Overview, sections, imports, exports, version info, and things to note (notes and info)

Capability matrix

FeatureSupportNotes
Reading the DOS, PE, COFF and optional headersSupported—
PE32 and PE32+ (32-bit and 64-bit)Supported—
Section permissions and entropySupportedEntropy is computed over the first 16 MB of each section
Imports and exports (function names)PartialImports up to 10,000. Delay-load imports are not shown
Version info (VS_VERSION_INFO)SupportedFixed version and the main StringFileInfo fields
Verifying a digital signature (certificate, tampering)Not supportedShows only whether signature data exists and its size
Virus or malware detectionNot supportedThe notes are hints from the structure, not a verdict
Running the file or dynamic analysisNot supportedThe file is never run
.NET metadata (types and methods)Not supportedShows only whether a CLR header exists
Resources such as icons and stringsNot supportedOnly the version resource is read
Offline useSupportedWorks without a network connection after the page has loaded once

Limits & notes

  • Files up to 200 MB. Larger files are refused before they are read.
  • Up to 10,000 imports. DLL and function names are shown up to 256 characters.
  • Up to 96 sections are read.
  • Entropy is computed over the first 16 MB of each section, and over 64 MB in total across all sections (later sections are not computed).
  • Long lists may be shortened on the screen.

Privacy & safety

The file is read only inside your browser. It is never run, and nothing is sent to or stored on a server, including signature and certificate data.

FAQ

Can I check an exe without running it?
Yes. The tool does not run the file. It reads the bytes and shows the headers, sections, imports and version info. It does not judge whether the file is safe.
Can I see what a DLL loads and exports?
Yes. Imports lists each DLL and the function names it loads; Exports lists the names the DLL provides. Delay-load imports are not shown.
What is the problem if ASLR and DEP are off?
ASLR moves code to a random address on each load, and DEP stops data from being run as code. A file without them has fewer defenses, but their absence is a note, not a verdict.
Can I verify a digital signature here?
No. The tool shows only whether signature data is present and how large it is. Verify the signature with your OS, for example in the file’s Digital Signatures tab in Properties.
Can this tool tell me if a file is a virus?
No. Entropy and permission combinations are hints. Use anti-virus software for scanning, and do not run files from untrusted sources.

Universal File Inspector

Drop any file to see its real format (from the content), its structure and metadata, what to watch out for, and which tools can process it — before opening it, or before sending it to someone.

No upload

File Hash — Checksum Calculator & Verifier

Drop a file to get its SHA-256 (and more); paste the published hash to see match or mismatch instantly. Even multi-gigabyte ISOs are read in chunks on your own device — nothing is uploaded.

No upload

Binary Data Studio (Hex Viewer)

Drop a file to open it as a hex dump with offsets, hex bytes and a text column. Only the visible rows are read, so even multi-gigabyte files open without freezing, and nothing leaves your device. Search, value interpretation, compare and export are on the same screen.

No upload

3D Model Viewer

Open 3D models in STL, GLB (glTF), OBJ, FBX or PLY right in your browser, with no 3D software. Rotate them, check the size, volume and holes, and save the current view as a PNG or convert the model to GLB, STL or OBJ. Your files stay on your device.

No upload

GeoJSON Studio

Open GeoJSON, TopoJSON, KML, GPX, CSV or WKT, draw the coordinates on a simple plain map, and check them against RFC 7946. You can also convert between formats and measure area and length on a sphere. Files are never sent to a server.

No upload

GIS Coordinate Tool

Convert latitude and longitude (decimal, DMS, degrees-minutes), the old Tokyo Datum, Japan plane rectangular coordinates, UTM, Web Mercator, regional mesh codes and geohash. Convert whole CSV or Excel columns at once, and calculate the distance and azimuth between two points.

No upload

Last updated: