Skip to main content
Service phase: Beta

This service is still in development. Give us your feedback or view this page on the current PRONOM service.

Format

Windows Portable Executable

Summary

Name
Windows Portable Executable
Identifiers
  • MIME: application/vnd.microsoft.portable-executable
  • Apple Uniform Type Identifier: com.microsoft.windows-executable
  • PUID: x-fmt/411
Description
A Windows Portable Executable (PE) is synonymous with a program or application that can potentially be run on Microsoft Windows. An executable is a file-format object that is compiled from source code files written in languages such as C, C++, Golang, or Rust among others. A PE is native to Windows and like other executables or programs, provided a means of distributing applications that performed a certain task or tasks for a specific operating system. Executables are compiled to a certain register width, e.g. 8-bit, 16-bit, 32-bit or 64-bit; which impacts the size of variables in memory, and may impact compatibilty on older or newer versions of an operating system, respectively. Executables might require external libraries or configuration to function and so the technical environment needed to run an executable should be documented and understood in order to preserve functionality over time and to protect future potential users of these files. The Windows Portable Executable format is used for the 'executable' component of a program, as well as external libraries such as dynamic link libraries (DLLs) other potential extensions are listed as '.acm, .ax, .cpl, .dll, .drv, .efi, .exe, .mui, .ocx, .scr, .sys, .tsp, .mun') (https://en.wikipedia.org/w/index.php?title=Portable_Executable&oldid=1182679182). Despite the name, PE files will not run on other operating systems such as MacOS and Linux. Application programs must be compiled to a specific operating system architecture to run on different environments, and PE files will have been compiled to a specific Windows architecture, e.g. 32-bit (fmt-899) or 64-bit (fmt-900).
Note
This specification describes the structure of executable (image) files and object files under the Windows family of operating systems. These files are referred to as Portable Executable (PE) and Common Object File Format (COFF) files, respectively- https://learn.microsoft.com/en-us/windows/win32/debug/pe-format
File extensions
exe, dll, sys
Source
Digital Preservation Department / The National Archives

Relationships

Has lower priority than
Has priority over

Internal signatures

Windows Portable Executable

Note
Header

Byte sequences

Min Frag Length
Absolute from BOF
Offset
0
Max offset
None
Byte Sequence
4D5A*50450000
Endianness
None

Changelog

  • Updated in V118

    Release date
    30 April 2024

    Windows Portable Executable: Description created as part of PRONOM Research Week 2023. Submitted by Ross Spencer.

  • Updated in V110

    Release date
    14 March 2023

    Windows Portable Executable: Added Portable Executable Format document, notes field updated. Submitted by Earldridge Jazzed Pineda .

  • Updated in V92

    Release date
    20 September 2017

    Windows Portable Executable: Changed MIME type from application/octet-stream to application/vnd.microsoft.portable-executable to match current IANA entry.