peinfo 1.0

Peinfo provides the capability to extract detailed information about portable executable files via the Command Line. It can retrieve a wide range of information, such as headers, sections, imports, exports, resources, and more, directly through the Command Line.

Utilization of peinfo
To use peinfo, you must provide its location and the input file path as a parameter. It will then give information on the portable executable, including file code signing details, product and file version numbers, software name, size in bytes, and the system architecture.

Access Additional Details
Furthermore, you can access details about the image base, subsystem, and application's checksum to verify its integrity. It also displays additional information about the operating system, image and subsystem versions, linker version, and link date. If available, peinfo will also reveal the PDB signature, age, file, and symbol URL.

Please note that you cannot save or export the data retrieved by peinfo, but you can easily copy and paste all the details directly from the console window.

peinfo provides support for EXE files and DLL and SYS file formats.

Usage Example:

peinfo c:\windows\notepad.exe

c:\windows\notepad.exe
No signature found on the file.
Product version: 10.0.22621.2506
File version: 6.2.22621.2506
Company: Microsoft Corporation
Description: Notepad
Product: Microsoft?Windows?Operating System
File size: 364544 bytes
Machine: x64
ImageBase: 0x140000000
Subsystem: 2 (GUI)
Checksum: 0x00066294
OS version: 10.0
Image version: 10.0
Subsystem version: 10.0
Linker version: 14.30 (Visual C++ 2022)
Link date: 1989-11-13 21:13:00 (0x255ebddc)
File index: 255EBDDC5b000
PDB sig: {2B15E81D-6F4F-CFBB-CA2E-25F1C46D50F5}
PDB age: 1
PDB index: 2B15E81D6F4FCFBBCA2E25F1C46D50F51
PDB file: notepad.pdb
Symbol url: http://msdl.microsoft.com/download/symbols/notepad.pdb/2B15E81D6F4FCFBBCA2E25F1C46D50F51/notepad.pdb

peinfo 1.0