---
id: "richpeheaderhash"
kind: "datatype"
status: "stable"
is_pii: false
categories: ["software"]
langs: ["common"]
quality: 46
url: "https://registry.apicrafter.io/datatype/richpeheaderhash"
---

# Rich PE Header hash (`richpeheaderhash`)

The Rich header is an undocumented header contained within PE files compiled and linked using the Microsoft toolchain. It contains information about the build environment that the PE file was created in.

- Personal data (PII): no
- Categories: Software development (software)
- Countries: global
- Languages: Common to most languages (common)
- Classification: identifier

## Examples

- `6fef15a59affb0e30563fc8baf21ed67` — Virus total file Twain_32.dll

## Metacrafter rules

2 rules: 1 match the field name, 1 match values.

- `richpeheaderhashbyknown` (field, `common/software.yaml`)
- `richpeheaderhashbyvalue` (data, `common/software.yaml`)

## Supported by tools

- `metacrafter`

## Sources

- other: <https://github.com/RichHeaderResearch/RichPE>

## Quality

Score 46/100. Missing: regexp, second example, negative example, authoritative source link, mapping (Wikidata, Schema.org, ...), translation.

JSON: <https://registry.apicrafter.io/api/v1/datatypes/richpeheaderhash.json> · Edit: <https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/software/richpeheaderhash.yaml>