PE Rich Header

[Clownacy]

MSVC-linked PE files come with a neat header that tells you some novel information like what version of MSVC it was compiled with, and how many C or C++ object files it was made from.

http://bytepointer.com/articles/the_microsoft_rich_header.htm https://www.ntcore.com/files/richsign.htm https://github.com/dishather/richprint https://gist.github.com/skochinsky/07c8e95e33d9429d81a75622b5d24c8b#file-rich-py-L12