Skip to main content
Service phase: Beta

This service is still in development. Give us your feedback or view this page on the current PRONOM service.

Format

Windows Portable Executable

Summary

Name
Windows Portable Executable
Version
64 bit
Identifiers
  • MIME: application/vnd.microsoft.portable-executable
  • Apple Uniform Type Identifier: com.microsoft.windows-executable
  • PUID: fmt/900
Description
A Windows Portable Executable (PE) 64-bit is synonymous with a program or application that can potentially be run on Microsoft Windows. An executable is a file-format object that is compiled from source code files written in languages such as C, C++, Golang, or Rust among others. A PE is native to Windows and like other executables or programs, provided a means of distributing applications that performed a certain task or tasks for a specific operating system. Executables are compiled to a certain register width, e.g. 8-bit, 16-bit, 32-bit or 64-bit; which impacts the size of variables in memory, and may impact compatibilty on older or newer versions of an operating system, respectively. A PE 64-bit is compiled to a 64-bit architecture and so will not run on 32-bit architectures or less. Executables might require external libraries or configuration to function and so the technical environment needed to run an executable should be documented and understood in order to preserve functionality over time and to protect future potential users of these files. The Windows Portable Executable format is used for the 'executable' component of a program, as well as external libraries such as dynamic link libraries (DLLs) other potential extensions are listed as '.acm, .ax, .cpl, .dll, .drv, .efi, .exe, .mui, .ocx, .scr, .sys, .tsp, .mun') (https://en.wikipedia.org/w/index.php?title=Portable_Executable&oldid=1182679182). Despite the name, PE files will not run on other operating systems such as MacOS and Linux. Application programs must be compiled to a specific operating system architecture to run on different environments.
Note
This specification describes the structure of executable (image) files and object files under the Windows family of operating systems. These files are referred to as Portable Executable (PE) and Common Object File Format (COFF) files, respectively- https://learn.microsoft.com/en-us/windows/win32/debug/pe-format
File extensions
exe, dll, sys
Source
Archives New Zealand / Archives New Zealand
Developed by
Microsoft Corporation
Supported by
Microsoft Corporation

Relationships

Has priority over

Internal signatures

Windows Portable Executable 64 bit

Note
DWORD Signature; IMAGE_FILE_HEADER FileHeader; IMAGE_OPTIONAL_HEADER OptionalHeader;

Byte sequences

Min Frag Length
Absolute from BOF
Offset
0
Max offset
0
Byte Sequence
4D5A{126-128500}50450000{20}0B02{66}[0000:1000]
Endianness
None

Changelog

  • Updated in V118

    Release date
    30 April 2024

    Windows Portable Executable 64 bit: Description created as part of PRONOM Research Week 2023. Submitted by Ross Spencer.

  • Updated in V110

    Release date
    14 March 2023

    Windows Portable Executable 64 bit: Added Portable Executable Format document, notes field updated. Submitted by Earldridge Jazzed Pineda .

  • Updated in V92

    Release date
    20 September 2017

    Windows Portable Executable 64 bit: Changed MIME type from application/octet-stream to application/vnd.microsoft.portable-executable to match current IANA entry.

  • Added in V85

    Release date
    29 June 2016

    Windows Portable Executable 64 bit: Signature submitted by Archives New Zealand.

    Windows Portable Executable 64 bit: Full entry added. Submitted by Archives New Zealand.