EXE Tags

This module extracts information from various types of Windows, MacOS and Unix executable and library files. The first table below lists information extracted from the header of Windows PE (Portable Executable) EXE files and DLL libraries.

Index2Tag Name WritableValues / Notes
0 MachineType no
0x14c = Intel 386 or later, and compatibles
0x14d = Intel i860
0x162 = MIPS R3000
0x166 = MIPS little endian (R4000)
0x168 = MIPS R10000
0x169 = MIPS little endian WCI v2
0x183 = Alpha AXP (old)
0x184 = Alpha AXP
0x1a2 = Hitachi SH3
0x1a3 = Hitachi SH3 DSP
0x1a6 = Hitachi SH4
0x1a8 = Hitachi SH5
0x1c0 = ARM little endian
0x1c2 = Thumb
0x1d3 = Matsushita AM33
0x1f0 = PowerPC little endian
0x1f1 = PowerPC with floating point support
0x200 = Intel IA64
0x266 = MIPS16
0x268 = Motorola 68000 series
0x284 = Alpha AXP 64-bit
0x366 = MIPS with FPU
0x466 = MIPS16 with FPU
0xebc = EFI Byte Code
0x8664 = AMD AMD64
0x9041 = Mitsubishi M32R little endian
0xc0ee = clr pure MSIL
2 TimeStamp no  
9 ImageFileCharacteristics no
Bit 0 = No relocs
Bit 1 = Executable
Bit 2 = No line