What binary formats and architectures does this tool support?

It parses PE-COFF (.exe, .dll, .sys), ELF (.so, .o, .elf), and Mach-O (.dylib, binaries) across architectures including x86, x86-64, ARM, AArch64, and RISC-V.

Are my binary files uploaded to a remote server?

No. All parsing, section mapping, and header inspections are executed locally in your browser using pure TypeScript.

What is the maximum file size supported?

The inspector accepts binary files up to 20 MB.

How does the inspector detect Position Independent Executables (PIE)?

For ELF, it checks for an ET_DYN type combined with a PT_INTERP segment; for PE and Mach-O, it evaluates dynamic base flags and MH_PIE load commands.

Can I view both 32-bit and 64-bit binaries?

Yes. The parser supports 32-bit and 64-bit variants, including PE32/PE32+, ELF32/ELF64, and 32-bit/64-bit Mach-O formats.

Elysia Tools

Navigation

Development

Windows PE / Linux ELF / Mach-O Binary Header, Section, Import & Export Inspector

Upload a PE-COFF (.exe/.dll), ELF or Mach-O binary and parse its headers end to end: DOS/PE signature, COFF machine, optional header (entry point, image base, subsystem, ASLR/NX/CFG), section table with RVA↔offset mapping, import/export directories, ELF program headers and PIE detection, dynamic symbols and DT_NEEDED, Mach-O load commands and dylibs — with cross-architecture annotations and a hex preview.

Details

What this tool helps you do

After magic detection the parser walks each structure: MZ → elfanew → PE\0\0 → COFF (machine, characteristics) → optional header (0x10B PE32 / 0x20B PE32+; entry point, image base, subsystem, DllCharacteristics for ASLR/NX/CFG/high-entropy VA; 16 data directories) → section table (name, virtual size, RVA, raw pointer, R/W/X flags), with RVA→file-offset resolution through section ranges feeding the import directory (DLL names + hint/name thunks) and export directory. ELF: eident (class, endianness, OS ABI), etype (ETDYN + PTINTERP ⇒ PIE), program and section header tables, .dynsym/.dynstr symbol names, DTNEEDED dependencies from .dynamic. Mach-O: 32/64-bit header (cputype, filetype, MH* flags such as PIE/DYLDLINK/NOHEAPEXECUTION) and load commands (LCSEGMENT64 with sections, LCSYMTAB, LCUUID, LCMAIN entry offset, LCLOADDYLIB/LCIDDYLIB), plus byte-swapped magic detection. Pure TypeScript — no native FFI or WASM — files are parsed locally in bounded memory.

Execution

Run this tool

Fill in the form, run the tool, and review the result in one place.

Samples

Windows PE / Linux ELF / Mach-O Binary Header, Section, Import & Export Inspector

What this tool helps you do

Run this tool

Examples that match this tool

Continue with connected tools and hubs

Learn when to use this tool, what it supports, and how real users apply it.

Key facts

Overview

When to use

How it works

Use cases

Examples

1. Verifying Security Flags on a Windows Console App

2. Analyzing Shared Library Dependencies in an ELF Binary

FAQ

Windows Image Processing C++ Samples

Windows Image Processing - C# Samples

Web Image Processing Python Samples

Windows File Operations - C++ Samples

APNG IDAT/fdAT Chunk, Streaming Deflate Replay and Disposal Method Frame-Timing Analyzer

NSFW Image Content Detector

Convert GIF to Raw Pixel Buffer

HDR AVIF to SDR PNG Tone Mapper