.EX_

EX_ File

Compressed Windows Executable
Ask a question
QUICK ANSWER

An EX_ file is a compressed copy of a Windows .exe, created by Microsoft's old install tools to save space on floppies and CDs. It cannot run as-is. On Windows, open Command Prompt and run "expand file.ex_ file.exe" to recover the executable, or open the file with 7-Zip. The file is not malware.

Developer: Microsoft Category: Compressed Files MIME: application/octet-stream
OPENS ON Windows macOS Linux
Related: .RAR · .ZIP · .Z01 · .7Z

On this page

19k+ extensions indexed
Last reviewed Jun 15, 2026

Not sure what your file is?

Drop any file into our identifier - we read just the first bytes to name the format.

Identify a file

What is the EX_ file format?

.ex_ is a compressed .exe executable file produced by Microsoft compression tools. An .ex_ file stores a complete Windows executable in a space-saving compressed form, without any ability to run it directly.

The idea behind the .ex_ format

.ex_ files are used for installer distribution purposes and to reduce file size. After installation, the files are decompressed and renamed back to their original .exe names. The naming convention follows a consistent rule: the last character of the original extension is replaced by an underscore - so .exe becomes .ex_, .dll becomes .dl_, .sys becomes .sy_, and so on. The format originates from early 1990s Microsoft tooling designed to fit programs onto space-constrained floppy disks.

The compressed data uses Microsoft's SZDD or KWAJ format (both LZ77-based), identifiable by the SZDD magic bytes (53 5A 44 44 88 F0 27 33) at offset 0. Newer installation media sometimes deliver these compressed files as named members inside a .cab archive, where the inner entry retains the .ex_ name. An .ex_ file is not a runnable program - it must be decompressed to recover the original .exe before it can be executed.

Creating and extracting .ex_ files

.ex_ files are generated from original .exe files using the Windows makecab command-line tool (or the older compress.exe). Reversing the process is possible by using the built-in Windows expand.exe tool or third-party archivers such as 7-Zip. The archive takes the same base name as the original .exe file, with only the extension's last character replaced by an underscore.

Security & safety

RISK: LOW

EX_ is a benign compression format, not malware and not encrypted - the '_' is just Microsoft's naming convention for a compressed file. The only real caution: after you expand it you get an EXE, which (like any executable) should only be run if you trust its source. Scan the recovered .exe before running if it came from an untrusted CD or download. The EX_ itself cannot execute until decompressed.

Format details

in a nutshell
FULL NAMECompressed Windows Executableaka Compressed EXE, Squeezed EXE
DEVELOPERMicrosoftsince early 1990s (MS-DOS/Windows install media; COMPRESS.EXE / EXPAND.EXE)
MIME TYPEapplication/octet-stream
TYPECompressed container holding a Windows EXE (binary)
MAGIC BYTES · FILE SIGNATURE
OFFSET
0001020304050607
HEX
535A444488F02733
ASCII
SZDD··'3
The classic single-file compressed form starts with the SZDD magic "SZDD\x88\xF0\x27\x33" (53 5A 44 44 88 F0 27 33) at offset 0. A second variant, KWAJ, starts with "KWAJ\x88\xF0\x27\xD1". The original (uncompressed) filename's last character is replaced by '_', hence EXE → EX_. Newer install media use CAB archives instead, where the inner member may still be named *.ex_.

Programs that open EX_ files

Windows3 apps
WinRAR Paid Open the .ex_ (especially if it's a CAB member) and extract the EXE.
7-Zip Open-source Right-click → 7-Zip → Open archive; 7-Zip reads SZDD/KWAJ and CAB and extracts the inner EXE.
Microsoft Expand (built-in) Built-in In Command Prompt: 'expand setup.ex_ setup.exe' - restores the original runnable EXE.
macOS1 app
7-Zip (via Keka / p7zip) Open-source Keka (p7zip backend) can extract SZDD/CAB-based .ex_ files to recover the EXE for inspection.
Linux1 app
cabextract / 7-Zip (p7zip) Open-source Use 'cabextract' for CAB-based files, or p7zip's 7z for SZDD; recovers the contained EXE.

Technical details

deep spec
EncodingBinary
Byte orderLittle-endian
DeveloperMicrosoft
Container formatMicrosoft SZDD or KWAJ single-file compressed stream; also appears as a named member inside a CAB archive
Compression algorithmLZ77-based MS-Compress (SZDD/KWAJ); MSZIP or LZX when delivered as a CAB member
Magic bytes - SZDD variant53 5A 44 44 88 F0 27 33 at offset 0 (ASCII prefix: SZDD)
Magic bytes - KWAJ variant4B 57 41 4A 88 F0 27 D1 at offset 0 - second MS-Compress single-file variant
Naming conventionLast character of the original extension replaced by underscore: .exe → .ex_, .dll → .dl_, .sys → .sy_
Files per containerExactly 1 file in standalone SZDD/KWAJ; unlimited when embedded as members inside a CAB archive
Integrity / checksumNo CRC in standalone SZDD/KWAJ streams; CAB members carry per-folder checksums
MIME typeapplication/octet-stream
Associated operating systemsMS-DOS and all Windows versions
Typical compressed sizeSmaller than the source .exe; common range 100 KB - 50 MB
ExecutabilityNot directly runnable; must be expanded to .exe with expand.exe or 7-Zip before execution
Superseded byCAB archives and modern Windows installers (MSI/MSIX); SZDD/KWAJ single-file compression is considered legacy
Releasedearly 1990s (MS-DOS/Windows install media; COMPRESS.EXE / EXPAND.EXE)
Latest versionMSZIP-based SZDD/KWAJ compression as used by MAKECAB/COMPRESS
Specificationlearn.microsoft.com

EX_ conversions

Community Q&A

asked by users
Ask a quick question
Get help from people who work with EX_ files. Be specific - include your system and software version.
No account needed · answers usually within a day

No questions yet - be the first to ask about EX_ files.

Frequently asked questions

What is an EX_ file?
It is a compressed copy of a Windows .exe, used on install media to save space. The last letter of 'exe' is replaced with an underscore. You must expand it before the program can run.
How do I open / extract an EX_ file?
On Windows run 'expand file.ex_ file.exe' in Command Prompt, or open it with 7-Zip and extract the EXE. Then run the recovered .exe.
Can I just rename .ex_ to .exe?
No. The file is compressed, not merely renamed. Renaming gives you a corrupt EXE. You have to decompress it with EXPAND or 7-Zip.
Is an EX_ file a virus?
No. EX_ is a legitimate Microsoft compression naming convention for a compressed EXE. After expanding it, treat the resulting EXE with normal caution and scan it if the source is untrusted.
Why is the extension EX_ with an underscore?
Microsoft's old compression tools replaced the last character of the original extension with '_' to mark it as compressed: exe→ex_, dll→dl_, cab→ca_, sys→sy_.
What program opens EX_ on Mac or Linux?
Use 7-Zip/p7zip (Keka on macOS) for SZDD files or cabextract for CAB-based ones; both recover the inner EXE, though the EXE itself is a Windows program.

References

1Microsoft - expand command referencelearn.microsoft.com
2Microsoft - MS-Compress (SZDD/KWAJ) compression overviewlearn.microsoft.com

Keep exploring

across the database

Top extensions this week

1.AQQAQQ Instant Messenger File
2.CRDOWNLOADChrome Partial Download File
3.PARTPartial Download File
4.EXEWindows Executable (Portable Executable)
5.DATProgram Data File (generic)
6.MDMarkdown Document
7.BINCD/DVD Disc Image (BIN/CUE)
8.M4AMPEG-4 Audio File
9.TMPTemporary File
10.ODTOpenDocument Text

Related extensions

.RARRAR Archive (Roshal ARchive)
.ZIPZIP Archive
.Z01Split ZIP Archive - First Part
.7Z7-Zip Archive
.001Split / multi-volume archive - first part (.001)
.ZIRenamed / Truncated ZIP Archive

Free file tools

An in-browser file identifier and image converter - everything runs on your device.

Open the toolbox

Browse file extensions A-Z