EXE
 |
This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed. (July 2011) |
EXE is the common filename extension denoting an executable file (a program) in the DOS, OpenVMS, Microsoft Windows, Symbian, and OS/2 operating systems. Besides the executable program, many EXE files contain other components called resources, such as bitmaps and icons which the executable program may use for its graphical user interface.
Contents |
[edit] EXE file formats
There are several main executable file formats:
[edit] DOS
- 16-bit DOS MZ executable: The original DOS executable file format, these can be identified by the letters "MZ" at the beginning of the file in ASCII.
- 16-bit New Executable: Introduced with Multitasking MS-DOS 4.0, these can be identified by the "NE" in ASCII. These never became popular or useful for DOS and cannot be run by any other version of DOS, but can usually be run by 16/32-bit Windows and OS/2 versions[citation needed].
[edit] OS/2
- 32-bit Linear Executable: Introduced with OS/2 2.0, these can be identified by the "LX" in ASCII. These can only be run by OS/2 2.0 and higher[citation needed]. They are also used by some DOS extenders.
- Mixed 16/32-bit Linear Executable: Introduced with OS/2 2.0, these can be identified by the "LE" in ASCII. This format is not used for OS/2 applications anymore, but instead for VxD drivers under Windows 3.x and Windows 9x, and by some DOS extenders.
[edit] Windows
- 32-bit Portable Executable: Introduced with Windows NT, these are the most complex[citation needed] and can be identified by the "PE" in ASCII (although not at the beginning; these files also begin with "MZ"). These can be run by all versions of Windows and DOS (DOS runs the MZ section, Windows runs the NE or PE section). Using HX DOS Extender DOS can load the NE and PE sections. They are also used in BeOS R3, although the format used by BeOS somewhat violates the PE specification as it doesn't specify a correct subsystem[citation needed]. These can also be used on ReactOS
- 64-bit Portable Executable (PE32+): Introduced by 64-bit versions of Windows, this is a PE file with wider fields. In most cases, you can write code that simply works as either a 32 and 64-bit PE file [1].
[edit] Other
[edit] Execution prevention
Windows has a Filter Manager component which provides the infrastructure for a new way to integrate file system filters into the system. These new filters are known as mini-filters. File system filters are used by anti virus and other applications. Using it, it's possible to prevent the execution of the executable by writing a mini-filter file system driver which works in much similar way to a anti-virus's quarantine module. Spysym[2] is an open source implementation of such a mini filter driver which prevents execution of certain executable files from removable disk.
