-
Notifications
You must be signed in to change notification settings - Fork 230
Following addresses
hasherezade edited this page Jun 6, 2026
·
2 revisions
Some of the values in the headers represent addresses within the PE.
The addresses can be of three different types. Each type is represented by a different color:
- Raw - green
- RVA - blue
- VA - purple
All valid addresses are followable. Right click on the address opens a context menu.
Depending on the configuration, you can follow the address immediately on mouse click, or by the action from the context menu. If you want to enable following on mouse click, tick the checkbox: "Follow on click" in the same menu.
Also the numbers in the hex editor can be interpreted as addresses and followed if applicable.
Example:
pebear_072_follow_addr1.mp4
~ hasherezade (@hasherezade), 2026 ~