NPE File Analyzer

[Nytro]

NPE File Analyzer

View and Edit 32bit and 64bit Portable Executable (PE) Files

NPE File Analyzer is a utility that allow users to view and edit 32bit and 64bit Portable Executable (PE) files, such as .EXE .DLL and .SYS files. NPE provides functions for inspection of unknown binaries, you can analyze sections, resources, import and export tables, relocations, TlsTable, and much more. It has a built-in process manager to analyze running processes and loaded modules.

It is possible to fix a dumped file, realign file, extract PE(s) from a file, add code cave and compare PE files to check for differences in the PE structure. NPE can also generate MD5 hash, SHA1 hash and CRC32 hash of a file. It has full support for PEiD plugins and it has also a built-in hex editor that allows you to edit a file.

Screenshots

Features

Add and Find Code Caves

Add to Explorer Context Menu

ASCII and UNICODE Strings Viewer

Bound Import Viewer

Change Icon (only 32-bit PEs supported)

Compare PE Files

Delay Import Viewer

Edit 32bit and 64bit portable executables

Export and Import Viewer

Extract Portable Executable Files

File Hasher (MD5 SH1 CRC32)

File Location Calculator

Full PEiD Plugin Compatibility

Hex Editor

Load Config Viewer

PE Editor

PE Section Viewer

Processes and Modules Manager

Remove Base Relocations

Resource Viewer

TimeDateStamp Adjuster

TLS Editor

Download:

http://downloads.novirusthanks.org/files/npe_setup.exe

Portable:

http://downloads.novirusthanks.org/files/portables/npe_portable.zip

Sursa: NPE File Analyzer - Anti Rootkit and Anti Malware – Security Software and Services - NoVirusThanks