peinfo - View PE (exe/dll/sys) Files Information v1.0 2024-04-13

Feature

• List code signing info
• List file version info
• List machine (CPU architecture)
• List image base
• List subsystem
• List checksum
• List OS version
• List image version
• List linker version
• List link date
• List file index
• List PDB signature
• List PDB age
• List PDB file
• List PDB symbol url

Usage

peinfo c:\windows\notepad.exe

c:\windows\notepad.exe
  No signature found on the file.
  Product version: 10.0.22621.2506
  File version: 6.2.22621.2506
  Company: Microsoft Corporation
  Description: Notepad
  Product: Microsoft?Windows?Operating System
  File size: 364544 bytes
  Machine: x64
  ImageBase: 0x140000000
  Subsystem: 2 (GUI)
  Checksum: 0x00066294
  OS version: 10.0
  Image version: 10.0
  Subsystem version: 10.0
  Linker version: 14.30 (Visual C++ 2022)
  Link date: 1989-11-13 21:13:00 (0x255ebddc)
  File index: 255EBDDC5b000
  PDB sig: {2B15E81D-6F4F-CFBB-CA2E-25F1C46D50F5}
  PDB age: 1
  PDB index: 2B15E81D6F4FCFBBCA2E25F1C46D50F51
  PDB file: notepad.pdb
  Symbol url: http://msdl.microsoft.com/download/symbols/notepad.pdb/2B15E81D6F4FCFBBCA2E25F1C46D50F51/notepad.pdb