# PPEE (puppy)

> Free Professional PE file Explorer and Editor for reverse engineers and malware researchers who need to statically inspect PE32/PE64 files in detail.

PPEE (also called puppy) is a lightweight Windows tool for editing and robust static analysis of malformed and crafted PE files. It supports PE32 and PE64, All PE directories, editing, dumping, hashing, string analysis, YARA, VirusTotal/Metadefender queries, and plugins.

## Product

- [Home](https://mzrst.com/): Product overview, features, and download
- [Download PPEE 1.15](https://mzrst.com/puppy/PPEE(puppy)%201.15.zip): Current release (2026-08-25)

## Features (summary)

- Fast malware-oriented static analysis for PE32/PE64
- Edit almost all of the PE directories
- Clustering/similarity engine via locally stored hashes
- Multi-file tabs; ARM64 exception directory; extended debug directory parsing
- Export, Import, Resource, Exception, Certificate, Relocations, Debug, TLS, Load Config, Bound Import, IAT, Delay Import, CLR/.NET
- Rich Header, Safe SEH, CFG, Enclave, Volatile metadata
- Entropy, SSDEEP, TLSH, CRC32, ImpHash, MD5, SHA1, SHA256, Authentihash
- Strings (URL, Registry, Suspicious); YARA plugin; VirusTotal and OPSWAT Metadefender
- Hex editor, context-menu integration, plugin support

## Contact

- Email: info@mzrst.com