ThreatWing Decompiler

Binary analysis with a verifiable audit trail

Analyze PE and ELF binaries you are authorized to examine. Every report records the input SHA-256, the analyzer profile and version, and diagnostics, so a result can be reproduced and checked.

Request beta access Existing user? Open console Read the manual Your first Decompiler run

Identify

Every file is hashed (SHA-256) and classified before analysis.

Recover

Pseudocode, strings, imports, sections, and control flow, with any timeout or skipped stage shown in the result.

Audit

Each run records who ran it, which analyzer profile and version were used, and hashes of every output.

Currently supported: PE and ELF binaries, x86 and x86-64. File-size limits and support for packed or protected binaries are confirmed when access is granted.

Status: hosted beta, access by request. Approved users can upload through the Decompiler console with their Decompiler workspace key (tenant API key) and active processing approval. Please do not email binaries. Request access →