{
  "added_at": "2026-11-03",
  "additional_evidence_urls": [
    "https://github.com/horsicq/XPEViewer/blob/828a0fbe8ba5586cec173609cb33c6f1a4f754df/docs/BUILD.md",
    "https://github.com/horsicq/XPEViewer/blob/828a0fbe8ba5586cec173609cb33c6f1a4f754df/changelog.txt",
    "https://github.com/horsicq/XPEViewer/blob/828a0fbe8ba5586cec173609cb33c6f1a4f754df/.gitmodules",
    "https://github.com/horsicq/XPEViewer/blob/828a0fbe8ba5586cec173609cb33c6f1a4f754df/gui_source/guimainwindow.cpp",
    "https://github.com/horsicq/XPEViewer/blob/828a0fbe8ba5586cec173609cb33c6f1a4f754df/release_version.txt",
    "https://github.com/horsicq/XPEViewer/blob/828a0fbe8ba5586cec173609cb33c6f1a4f754df/LICENSE",
    "https://github.com/horsicq/FormatWidgets/blob/8de1efff3cf322943fb098dda6baf2dbbd9fea70/PE/pewidget.cpp",
    "https://github.com/horsicq/XPEViewer/releases/tag/0.05",
    "https://github.com/horsicq/XPEViewer/releases/tag/0.06",
    "https://github.com/horsicq/XPEViewer/releases/tag/Beta"
  ],
  "category": "native-analysis",
  "description_en": "Qt-based PE file viewer and editor for Windows, Linux and macOS by horsicq, the author of the catalog's Detect It Easy. Its PE view parses the DOS, NT and optional headers, sections, normal, delay-load and bound imports, exports, resources including manifests, version data and string tables, relocations, TLS callbacks, exception, debug and load-configuration data, certificates, the Rich header and .NET metadata tables. Hex, disassembly, strings, entropy, hash, memory-map and extractor views sit beside Detect It Easy, Nauz File Detector and YARA scans and an optional VirusTotal lookup.",
  "description_zh": "horsicq 开发的基于 Qt 的 PE 文件查看与编辑工具，支持 Windows、Linux 和 macOS；作者也是本目录所收录 Detect It Easy 的作者。其 PE 视图可解析 DOS 头、NT 头和可选头、节区、普通导入、延迟加载导入和绑定导入、导出、资源（包括清单、版本信息和字符串表）、重定位、TLS 回调、异常、调试和加载配置数据、证书、Rich 头以及 .NET 元数据表。另有十六进制、反汇编、字符串、熵、哈希、内存映射和提取器视图，并集成 Detect It Easy、Nauz File Detector 和 YARA 扫描，以及可选的 VirusTotal 查询。",
  "entry_url": "https://awesomerea.org/resources/xpeviewer/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/xpeviewer/",
  "evidence_url": "https://github.com/horsicq/XPEViewer/blob/828a0fbe8ba5586cec173609cb33c6f1a4f754df/README.md",
  "group": "tools",
  "id": "xpeviewer",
  "json_url": "https://awesomerea.org/resources/xpeviewer/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/xpeviewer/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/xpeviewer/index.md",
  "name": "XPEViewer",
  "name_zh": "XPEViewer PE 文件查看与编辑工具",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Latest full release at review: 0.05, published 2024-07-02, with a Linux AppImage, Debian 10–12 and Ubuntu 14.04–24.04 .deb packages, macOS x86_64 and Qt 6 arm64 packages, Windows x86, x64 and XP portable zips and a source tarball. Release 0.06 (2025-12-22) is marked as a prerelease with no attached files; the rolling Beta prerelease carries 0.06 Ubuntu 22.04/24.04 packages and Windows portable zips, and release_version.txt on the reviewed master commit reads 0.06.",
    "Source builds need a recursive clone of 56 horsicq submodules, including Detect-It-Easy, signatures and XYara. docs/BUILD.md covers Docker, a Debian package script, autotools, qmake6 with Qt 6, CMake, macOS with Qt 5.15.2, Windows 7–10 with Visual Studio 2019 and Qt 5.15.2, and Windows XP with Visual Studio 2013 and Qt 5.6.3.",
    "Supply the PE file yourself. The main window opens files for writing when it can and falls back to read-only, so editing changes the opened file; work on a copy. The VirusTotal view uses that online service.",
    "MIT (LICENSE). The README itself is brief: download, run and build links, a changelog and screenshots; the parsed structures come from the PE widget source in the pinned FormatWidgets submodule. The main repository commits no sample binaries."
  ],
  "requirements_zh": [
    "审阅时最新的正式版本为 0.05，发布于 2024-07-02，提供 Linux AppImage、Debian 10–12 和 Ubuntu 14.04–24.04 的 .deb 安装包、macOS x86_64 和 Qt 6 arm64 安装包、Windows x86、x64 和 XP 便携版压缩包以及源码包。0.06 版（2025-12-22）被标为预发布，且未附带文件；滚动更新的 Beta 预发布提供 0.06 版的 Ubuntu 22.04/24.04 安装包和 Windows 便携版压缩包，所审阅 master 分支提交中的 release_version.txt 为 0.06。",
    "从源码构建需要递归克隆 56 个 horsicq 子模块，其中包括 Detect-It-Easy、signatures 和 XYara。docs/BUILD.md 介绍了 Docker、Debian 打包脚本、autotools、基于 Qt 6 的 qmake6、CMake、使用 Qt 5.15.2 的 macOS、使用 Visual Studio 2019 和 Qt 5.15.2 的 Windows 7–10，以及使用 Visual Studio 2013 和 Qt 5.6.3 的 Windows XP 构建方式。",
    "需自行提供 PE 文件。主窗口在可行时以可写方式打开文件，否则退回只读，因此编辑会修改所打开的文件，请在副本上操作。VirusTotal 视图会使用该在线服务。",
    "MIT 许可证（LICENSE）。README 本身很简短，只有下载、运行和构建链接、更新日志及截图；可解析结构来自所固定 FormatWidgets 子模块中的 PE 组件源码。主仓库未提交示例二进制。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/horsicq/XPEViewer",
  "verification": "source-reviewed",
  "verified_at": "2026-10-27"
}