ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Difference between pages "Portable Executable Format" and "File:Hauwei U866C TAPS.jpg"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
 
 
Line 1: Line 1:
{{expand}}
 
  
The '''Portable Executable Format''' is used by [[Windows]] to store executable code.
 
The format is also used to store other types of data, e.g. like Multilingual User Interface (MUI) strings and EventLog messages.
 
 
== See Also ==
 
* [[Windows Event Log (EVT)]]
 
* [[Windows XML Event Log (EVTX)]]
 
 
== External Links ==
 
 
* [http://en.wikipedia.org/wiki/Portable_Executable Wikipedia: Portable Executable]
 
* [http://msdn.microsoft.com/en-us/library/windows/hardware/gg463119.aspx PE and COFF Specification], by [[Microsoft]]
 
* [http://blog.dkbza.org/search/label/pefile Blog about pefile], by [[Ero Carrera]]
 
 
== Tools ==
 
* [http://code.google.com/p/pefile/ pefile is a Python module to read and work with PE (Portable Executable) files], by [[Ero Carrera]]
 
 
=== Resources ===
 
* [http://www.angusj.com/resourcehacker/ Resource Hacker], by [[Angus Johnson]]
 
 
[[Category:File Formats]]
 

Latest revision as of 01:43, 12 September 2013