Tool
PE Tree
Python module that shows Portable Executable files in a tree view using pefile and PyQt5, as a standalone application and as a plugin for IDA Pro, Ghidra, Volatility, Rekall and minidump. It reads PE images from files, ZIP archives, Windows memory dumps and analysis databases.
- Targets
- Binary
- Category
- Native analysis tools
- Relationship
- Foundation tool
- Sources reviewed
Requirements & limits
- The standalone application needs Python 3.5+ and runs on Windows, Linux and macOS; each plugin needs its host tool. The repository is archived, with the last release 1.0.29 from 2020-10-05.
- Apache-2.0 per LICENSE.
About this entry
The description was reviewed against primary sources.
Primary sources
- README.md GitHub · blackberry/pe_tree · Revision 2be607f