Print compiler information stored in Rich Header of PE executables.
Rich Header is a (usually small) section of binary data created by Microsoft linker. The data is located between old MZ header stub (also called DOS stub) and PE header. The data is encoded using a simple key, the only readable part of the whole section being the word "Rich".
The section is ubiquitous: you can find it in almost any type of PE (portable executable) file: .EXE, .DLL. .CPL (control panel applets), etc. Yet, if the file was created by a non-Microsoft linker, it will not have a Rich header.
The official name for this section is not known for sure, most likely it is something similar to "build prodid block".
The Rich Header contains information about Microsoft compilers used to produce this binary.
These details are provided for information only. No information here is legal advice and should not be used as such.
30 Day SummaryJan 1 2025 — Jan 31 2025
|
12 Month SummaryJan 31 2024 — Jan 31 2025
|