File & binary inspection
Look inside an executable, a packet capture or a photo before you trust it, run it or publish it.
These are read-only tools: they parse a file and tell you what is in it, and none of them execute anything. That is the whole point — an unknown .exe should be answered with a header dump and a hash you can search, not with a double click. The same instinct applies to a .pcap from a support ticket and to a photo you are about to post with its GPS tag still attached.
Start here
EXE / DLL ViewerInspect PE headers, icons, imports & hashesOpenWhich one do I need?
- Someone sent you a Windows binary
- The EXE / DLL Viewer parses the PE headers: compile timestamp, sections, imported DLLs and functions, embedded icons and version strings, plus MD5/SHA-1/SHA-256 so you can look the file up before deciding anything. The file never runs.
- You have a packet capture and no Wireshark
- PCAP to JSON decodes the capture into readable records; PCAP Conversations ranks the top talkers and host pairs; PCAP to Flows CSV aggregates the 5-tuples so you can open the result in a spreadsheet.
- You are about to publish a photo
- The EXIF Remover shows what the file is carrying — camera, software, timestamps, and often exact GPS coordinates — and strips it. Check first, then strip; the surprise is usually in what was there.
The rest of the set
Also useful
Guides
See all 3 guidesInspect an EXE without running it: reading PE headers
What the PE headers, section table, import list and per-section entropy tell you about a Windows executable, and where static triage stops being enough.
Sep 18, 2026 · 7 min
Read a pcap without Wireshark: headers, flows and TLS
How pcap and pcapng are laid out, where snaplen truncation bites, how to turn packets into flows and endpoints, and what TLS still leaks in a capture.
Sep 18, 2026 · 6 min
What photo metadata reveals: Exif, IPTC and XMP
The location, timestamps, serial numbers and embedded thumbnail inside a photo, what platforms really strip, and how to verify a file is actually clean.
Sep 18, 2026 · 7 min