Skip to content

Following addresses

hasherezade edited this page Jun 6, 2026 · 2 revisions

Some of the values in the headers represent addresses within the PE.

The addresses can be of three different types. Each type is represented by a different color:

  • Raw - green
  • RVA - blue
  • VA - purple

All valid addresses are followable. Right click on the address opens a context menu.

Depending on the configuration, you can follow the address immediately on mouse click, or by the action from the context menu. If you want to enable following on mouse click, tick the checkbox: "Follow on click" in the same menu.

Also the numbers in the hex editor can be interpreted as addresses and followed if applicable.

Example:

pebear_072_follow_addr1.mp4

Clone this wiki locally