AwesomeREA.org

Tool

XPEViewer

Qt-based PE file viewer and editor for Windows, Linux and macOS by horsicq, the author of the catalog's Detect It Easy. Its PE view parses the DOS, NT and optional headers, sections, normal, delay-load and bound imports, exports, resources including manifests, version data and string tables, relocations, TLS callbacks, exception, debug and load-configuration data, certificates, the Rich header and .NET metadata tables. Hex, disassembly, strings, entropy, hash, memory-map and extractor views sit beside Detect It Easy, Nauz File Detector and YARA scans and an optional VirusTotal lookup.

Targets
Binary
Category
Native analysis tools
Relationship
Foundation tool
Sources reviewed

Requirements & limits

  • Latest full release at review: 0.05, published 2024-07-02, with a Linux AppImage, Debian 10–12 and Ubuntu 14.04–24.04 .deb packages, macOS x86_64 and Qt 6 arm64 packages, Windows x86, x64 and XP portable zips and a source tarball. Release 0.06 (2025-12-22) is marked as a prerelease with no attached files; the rolling Beta prerelease carries 0.06 Ubuntu 22.04/24.04 packages and Windows portable zips, and release_version.txt on the reviewed master commit reads 0.06.
  • Source builds need a recursive clone of 56 horsicq submodules, including Detect-It-Easy, signatures and XYara. docs/BUILD.md covers Docker, a Debian package script, autotools, qmake6 with Qt 6, CMake, macOS with Qt 5.15.2, Windows 7–10 with Visual Studio 2019 and Qt 5.15.2, and Windows XP with Visual Studio 2013 and Qt 5.6.3.
  • Supply the PE file yourself. The main window opens files for writing when it can and falls back to read-only, so editing changes the opened file; work on a copy. The VirusTotal view uses that online service.
  • MIT (LICENSE). The README itself is brief: download, run and build links, a changelog and screenshots; the parsed structures listed here come from the PE widget source in the pinned FormatWidgets submodule. The main repository commits no sample binaries, and submodule contents were not reviewed beyond that widget. No files were opened for this entry.

About this entry

The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.

Report an outdated entry Suggest a translation fix

Primary sources

  1. README.md GitHub · horsicq/XPEViewer · Revision 828a0fb
  2. docs/BUILD.md GitHub · horsicq/XPEViewer · Revision 828a0fb
  3. changelog.txt GitHub · horsicq/XPEViewer · Revision 828a0fb
  4. .gitmodules GitHub · horsicq/XPEViewer · Revision 828a0fb
  5. gui_source/guimainwindow.cpp GitHub · horsicq/XPEViewer · Revision 828a0fb
  6. release_version.txt GitHub · horsicq/XPEViewer · Revision 828a0fb
  7. LICENSE GitHub · horsicq/XPEViewer · Revision 828a0fb
  8. PE/pewidget.cpp GitHub · horsicq/FormatWidgets · Revision 8de1eff
  9. https://github.com/horsicq/XPEViewer/releases/tag/0.05
  10. https://github.com/horsicq/XPEViewer/releases/tag/0.06
  11. https://github.com/horsicq/XPEViewer/releases/tag/Beta

More in Native binaries

All 158 entries in Native binaries