NPE File Analyzer is a developer-oriented tool that allows users to view and edit Portable Executable (PE) files, such as .EXE .DLL and .SYS files. It provides functions for inspection of unknown binaries, you can analyze sections, resources, import and export tables, relocations, TlsTable, and much more. It has a built-in process manager to analyze running processes and loaded modules. You can then load the process executable or module into NPE File Analyzer for more detailed analysis, while other options allow you to pause, resume or kill the executable’s threads.
And there are a host of other interesting functions and features scattered throughout the program menus. So a hex editor lets you view and edit your chosen PE file; a File Hasher option calculates its MD5, SHA1 and CRC32 hashes; an Icon tool extracts the icon from an executable, or replaces it with something else; the String Viewer quickly displays any ASCII and Unicode strings; and NPE File Analyzer can be integrated with Explorer’s context menu, so the program need only ever be a right-click away.
Features
- Add and Find Code Caves
- Add to Explorer Context Menu
- Bound Import Viewer
- Compare PE Files
- Delay Import Viewer
- Export and Import Viewer
- Extract Portable Executable Files
- File Hasher (MD5 SH1 CRC32)
- File Location Calculator
- Full PEiD Plugin Compatibility
- Hex Editor
- Load Config Viewer
- PE Editor
- PE Section Viewer
- Processes and Modules Manager
- Remove Base Relocations
- Resource Viewer
- TimeDateStamp Adjuster
- TLS Editor
Be the first to comment