NPE File Analyzer is a utility that allow users to view and edit 32bit and 64bit Portable Executable (PE) files, such as .EXE .DLL and .SYS files. NPE provides functions for inspection of unknown binaries, you can analyze sections, resources, import and export tables, relocations, TlsTable, and much more. It has a built-in process manager to analyze running processes and loaded modules.
It is possible to fix a dumped file, realign file, extract PE(s) from a file, add code cave and compare PE files to check for differences in the PE structure. NPE can also generate MD5 hash, SHA1 hash and CRC32 hash of a file. It has full support for PEiD plugins and it has also a built-in hex editor that allows you to edit a file.
Features:
- * Add and Find Code Caves
- * Add to Explorer Context Menu
- * ASCII and UNICODE Strings Viewer
- * Bound Import Viewer
- * Change Icon (only 32-bit PEs supported)
- * Compare PE Files
- * Delay Import Viewer
- * Edit 32bit and 64bit portable executables
- * Export and Import Viewer
- * Extract Portable Executable Files
- * File Hasher (MD5 SH1 CRC32)
- * File Location Calculator
- * Full PEiD Plugin Compatibility
- * Hex Editor
- * Load Config Viewer
- * PE Editor
- * PE Section Viewer
- * Processes and Modules Manager
- * Remove Base Relocations
- * Resource Viewer
- * TimeDateStamp Adjuster
- * TLS Editor
File Size: 811027 bytes
Operating System: Windows All
Tidak ada komentar:
Posting Komentar