RunLocal package desk / 09

APPX / MSIX Inspector

Open a Windows app package before you install it. Read the manifest, identity, capabilities, file tree, signature blobs, and bundle contents—then export a copy without running a line of package code.

Package intake

Choose an APPX or MSIX file

read-only
Drop a package here, or click to choose .appx · .msix · .appxbundle · .msixbundle · .zip
No package loaded.

The package stays in this browser tab. Nothing is uploaded or executed.

Troubleshooting

It says no AppxManifest.xml or AppxBundleManifest.xml was found

The tool only recognizes a genuine APPX/MSIX/bundle package — a ZIP/OPC container with a manifest file at its root (or inside each inner package of a bundle). A renamed .zip, a manually zipped folder, or a corrupted download will produce this error even though the file opens fine as a plain ZIP.

The signature blob is missing — does that mean the package is unsafe?

Not by itself. This page only reports whether an AppxSignature.p7x blob is present in the package; it does not verify a Microsoft signature or vouch for the package's trustworthiness either way. Treat a missing signature as one more data point, not a verdict.

What's the difference between a bundle and a single package?

An APPXBUNDLE or MSIXBUNDLE is a container holding several inner APPX/MSIX packages, for example one per CPU architecture or language. This tool detects a bundle from its manifest type or file extension and lists the inner packages it declares, up to the first 200.

Does this run any code from the package?

No. The package is only decompressed and its XML manifest parsed as text — nothing inside it is ever executed, installed, or run.