PEAnatomist

Want to look inside PE format?

The free PEAnatomist utility supports almost all known and some undocumented structures inside MS PortableExecutable files (EXE, DLL, SYS and the like), LIB files and object files in COFF, MSVC CxxIL and ExtendedObj formats, and also performs simple analysis of the received data.

Current version of the program: 0.2.11511.1500

Release date: 2023-03-11
File size: 217 KB
License: Freeware

ZIP-file hash:
MD5: 00EB9F26709CF681B0913254C51BFE71
SHA1: B3AB75A74F2EC507120E9D303E373D11D8B941EB
SHA256: 16CFB3BEE2A2A7837CBC10660B5721634437CE657879B9C3050DCDF080C9439E

Download VirusTotal report

The new version highlights

Added parsing of Export, Import and DelayImport tables for emulated architecture in ARM64X
Updated IMAGE_DEBUG_TYPE_EX_DLLCHARACTERISTICS flag values (WinBuild 25309)
Fixed a number of errors in processing PE and OBJ

Contacts

Currently, you can write to the author of the program only using forums ru-board.com and forum.exetools.com.
There are no other official ways.

Attention!

Please make sure the SHA256 hash of the .exe file matches the one specified in the Readme file inside of a ZIP and on the changelog page in case the program was obtained from another source. Differences in these values indicate third-party interference. It is recommended to avoid of using a modified copy of the program.