R
Analyzed about 22 hours ago
Print compiler information stored in Rich Header of PE executables.
Rich Header is a (usually small) section of binary data created by Microsoft linker. The data is located between old MZ header stub (also called DOS stub) and PE header. The data is encoded using a simple key, the only readable
... [More]
part of the whole section being the word "Rich".
The section is ubiquitous: you can find it in almost any type of PE (portable executable) file: .EXE, .DLL. .CPL (control panel applets), etc. Yet, if the file was created by a non-Microsoft linker, it will not have a Rich header.
The official name for this section is not known for sure, most likely it is something similar to "build prodid block".
The Rich Header contains information about Microsoft compilers used to produce this binary. [Less]
285
lines of code
0
current contributors
27 days
since last commit
0
users on Open Hub