Difference between revisions of "Portable Executable Format"
From Forensics Wiki
Joachim Metz (Talk | contribs) (Created page with "{{expand}} Windows mainly uses the '''Portable Executable Format''' to store its executable code. Although the format is also used to store other types of data, e.g. like...") |
Joachim Metz (Talk | contribs) |
||
| Line 1: | Line 1: | ||
{{expand}} | {{expand}} | ||
| − | + | The '''Portable Executable Format''' is used by [[Windows]] to store executable code. | |
| − | + | The format is also used to store other types of data, e.g. like Multilingual User Interface (MUI) strings and EventLog messages. | |
| + | |||
| + | == See Also == | ||
| + | * [[Windows Event Log (EVT)]] | ||
| + | * [[Windows XML Event Log (EVTX)]] | ||
== External Links == | == External Links == | ||
Revision as of 00:35, 18 September 2012
|
Please help to improve this article by expanding it.
|
The Portable Executable Format is used by Windows to store executable code. The format is also used to store other types of data, e.g. like Multilingual User Interface (MUI) strings and EventLog messages.
Contents |
See Also
External Links
- Wikipedia: Portable Executable
- PE and COFF Specification, by Microsoft
- Blog about pefile, by Ero Carrera