Choose your plan
Free
- Sample Analysis
- 3rd party & Artificial Intelligence
- Nag window every 5 analyses
- Personal Use Only
- Forum support
Premium
- Sample Analysis
- 3rd party & Artificial Intelligence
- Comparison form & similar buffers
- No limitation, no nag window
- Enterprise Use Allowed
- Email support
Features
Everything you need, nothing you don't
Artificial Intelligence
Adlice PEViewer has built-in Artificial Intelligence that generates a malicious score. The neural-network features are exposed as indicators to help anyone understand the score, completed by a broader score taking into account 3rd-party vendor classifications.
- A score you can question.
- Every verdict comes with the neural-network indicators behind it, so you can see why a file scored the way it did.
- Two scores, not one.
- The built-in AI score sits alongside a broader score weighing third-party vendor classifications.
- Built for unknown samples.
- Scoring works on files no signature has seen yet, which is where a parser alone runs out of answers.
3rd Party Scanners
A fantastic PE parser — but not only. It integrates many 3rd-party scanners, analyzers and tools to ease file classification: VirusTotal, SSDEEP fuzzy hashing, MalPE AI and a fields comparator are just a small part of what it contains.
- Many engines, one view.
- VirusTotal and MalPE AI verdicts are folded in beside the built-in score instead of being checked one by one.
- Fuzzy hashing.
- SSDEEP similarity ties a sample to families it resembles, even when the bytes are not identical.
- Compare fields directly.
- A side-by-side comparator puts two files head to head so differences stand out immediately.
Static & Dynamic
There are plenty of static PE parsers, but few dynamic ones. Adlice PEViewer works on both files and process memory — the ultimate tool for anyone analysing malware, or hobbyists wanting to classify files.
- A full PE parser.
- Headers, sections, imports, resources and signatures, laid out rather than buried in a hex dump.
- Straight from memory.
- Reads and unpacks modules out of a live process, which is where packed samples finally show themselves.
- Static and dynamic together.
- Plenty of tools do one or the other; doing both in one place is what makes a sample quick to classify.
See it in action
What users say
Trusted by people who clean real machines
A must-have for every malware researcher
“I used to have various malware-analysis tools, most of them decades old and not updated. Then I found this — a really nice UI, easy to use, fast to parse, everything clearly displayed. I've converted all my colleagues and we now use almost only Adlice PEViewer every day for classification. The scores and indicators really help writing signatures because we immediately know where to look. A must-have!”
Get it now
Download Adlice PEViewer
Latest version · v5.2
- OS:
- From Windows 7 SP1 to Windows 11
- Arch:
- 32-bit, 64-bit & ARM64
By downloading, you accept the EULA.