Difference between revisions of "Type PE"
Jump to navigation
Jump to search
| (One intermediate revision by the same user not shown) | |||
| Line 1: | Line 1: | ||
{| style="float:right;border:1px solid black" | {| style="float:right;border:1px solid black" | ||
| − | |+ Details | + | |+ [[Type_GIF|<<]] Details [[Type_MP3|>>]] |
| Defined Constant | | Defined Constant | ||
| <code>Type_PE</code> | | <code>Type_PE</code> | ||
| Line 46: | Line 46: | ||
=Details= | =Details= | ||
* [https://msdn.microsoft.com/en-us/windows/hardware/gg463119.aspx EXE] | * [https://msdn.microsoft.com/en-us/windows/hardware/gg463119.aspx EXE] | ||
| + | * [https://formats.kaitai.io/microsoft_pe/ Kaitai] | ||
Latest revision as of 06:50, 6 March 2026
| Defined Constant | Type_PE
|
| File Type Value | 206 |
| Parent Type | None |
| Carve | Yes |
| Format Details | Yes |
| Carve Meta Data | Yes |
| MIME Type | application/octet-stream
|
| Filename Extension | exe
|
EXE
Description
PE Executable
Truxton Exploiters
This file type is handled by the following ETLs:
Items Produced
Truxton will extract the following from this file type:
Carve Meta Data
When Truxton carves this file, it can populate the following columns in the [File] table:
Created- When the file was createdName- The name of the file
