Inspect an EXE, DLL, ELF or Mach-O file: headers, sections, imports, strings and entropy
Drop a file here, or
The file is read in your browser. Nothing is uploaded and nothing is stored.
It parses the file's own structure the way a reverse engineer would start: the executable format (PE for Windows, ELF for Linux, Mach-O for macOS), the target architecture, the sections and their entropy, which libraries and functions it imports, what it exports, and the readable text inside it. High entropy in a code section usually means the file is packed or encrypted; a program that imports almost nothing but LoadLibrary and GetProcAddress is usually resolving its real imports at runtime to stay hidden.
Everything runs in your browser with JavaScript, so the file never leaves your computer and nothing is stored on this site. That also means there is no disassembly or decompilation here — for that the file has to be analysed on a server, which is a different tool.
Suspicious file? Run it through the virus & URL scan as well, which checks it against 70+ antivirus engines.
mrpanos.com