January 2009 - Posts

Portable Executable File Format on Memory Dump
20 January 09 04:52 AM | blueespresso | 1 Comments   

I am going to describe how we can check PE stuffs on a file loaded on to a system in a memory dump file in this article. PE file format is the file format for Win32 Executables having extensions like .exe, .sys, .dll, etc. Here I put down on the short Read More...

Filed under: PE File Format