filenamechrome_elf.dll
size824320 (0xc9400)
md50ee67ad4802a8346df1deaaeb70cb5c6
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x78
blocks_in_file1
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0
ss0
sp0
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x78

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 24 00 00                           |mode.$..        |

PE Header

SignaturePE
Machine0x14c
NumberOfSections0xa
TimeDateStamp0x5f528d7f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2122
Magic0x10b
LinkerVersion14.0
SizeOfCode0x8cc00
SizeOfInitializedData0x3c200
SizeOfUninitializedData0
AddressOfEntryPoint0x66da2
BaseOfCode0x1000
BaseOfData0
ImageBase0x1c20000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0xd4000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

namevavsizeraw sizeflags
.text0x10000x8cb8c0x8cc00R-X CODE
.rdata0x8e0000x1a7280x1a800R-- IDATA
.data0xa90000x1e6780x1ae00RW- IDATA
.00cfg0xc800040x200R-- IDATA
.crthunk0xc90000x400x200R-- IDATA
.tls0xca00090x200RW- IDATA
.voltbl0xcb0000xf00x200---
CPADinfo0xcc0000x280x200RW- IDATA
.rsrc0xcd0000x6a00x800R-- IDATA
.reloc0xce0000x5a900x5c00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0xa4ec70x38f
IMPORT0xa52560x28
RESOURCE0xcd0000x6a0
EXCEPTION00
SECURITY00
BASERELOC0xce0000x5a90
DEBUG0xa4a1c0x1c
ARCHITECTURE00
GLOBALPTR00
TLS0xa49200x18
LOAD_CONFIG0x96c700xb8
Bound_IAT00
IAT0xa54e80x268
Delay_IAT0xa4cd00x80
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x1cea0000x1cea0080x1ce58e80x1cc4ca800
typenamesizecp
VERSION#111760
MANIFEST#23580
module_namehintordfunction_name
KERNEL32.dllAcquireSRWLockExclusive
KERNEL32.dll136CloseHandle
KERNEL32.dll157CompareStringW
KERNEL32.dll188CreateDirectoryW
KERNEL32.dll193CreateEventW
KERNEL32.dll205CreateFileW
KERNEL32.dll220CreateMutexW
KERNEL32.dll222CreateNamedPipeW
KERNEL32.dll231CreateProcessW
KERNEL32.dll233CreateRemoteThread
KERNEL32.dll245CreateThread
KERNEL32.dll267DecodePointer
KERNEL32.dll274DeleteCriticalSection
KERNEL32.dll279DeleteFileW
KERNEL32.dll301DuplicateHandle
KERNEL32.dll303EncodePointer
KERNEL32.dll307EnterCriticalSection
KERNEL32.dll342EnumSystemLocalesW
KERNEL32.dll352ExitProcess
KERNEL32.dll356ExpandEnvironmentStringsW
KERNEL32.dll364FileTimeToSystemTime
KERNEL32.dll375FindClose
KERNEL32.dll381FindFirstFileExW
KERNEL32.dll398FindNextFileW
KERNEL32.dll417FlushFileBuffers
KERNEL32.dll424FormatMessageA
KERNEL32.dll428FreeEnvironmentStringsW
KERNEL32.dll429FreeLibrary
KERNEL32.dll436GetACP
KERNEL32.dll451GetCPInfo
KERNEL32.dll472GetCommandLineA
KERNEL32.dll473GetCommandLineW
KERNEL32.dll480GetComputerNameExW
KERNEL32.dll510GetConsoleMode
KERNEL32.dll514GetConsoleOutputCP
KERNEL32.dll531GetCurrentDirectoryW
KERNEL32.dll537GetCurrentProcess
KERNEL32.dll538GetCurrentProcessId
KERNEL32.dll541GetCurrentThread
KERNEL32.dll542GetCurrentThreadId
KERNEL32.dll547GetDateFormatW
KERNEL32.dll561GetDriveTypeW
KERNEL32.dll569GetEnvironmentStringsW
KERNEL32.dll571GetEnvironmentVariableW
KERNEL32.dll583GetFileAttributesW
KERNEL32.dll585GetFileInformationByHandle
KERNEL32.dll590GetFileSizeEx
KERNEL32.dll592GetFileType
KERNEL32.dll603GetFullPathNameW
KERNEL32.dll611GetLastError
KERNEL32.dll612GetLocalTime
KERNEL32.dll615GetLocaleInfoW
KERNEL32.dll624GetLongPathNameW
KERNEL32.dll630GetModuleFileNameW
KERNEL32.dll633GetModuleHandleExW
KERNEL32.dll634GetModuleHandleW
KERNEL32.dll647GetNativeSystemInfo
KERNEL32.dll665GetOEMCP
KERNEL32.dll688GetProcAddress
KERNEL32.dll694GetProcessHeap
KERNEL32.dll696GetProcessId
KERNEL32.dll704GetProcessTimes
KERNEL32.dll709GetProductInfo
KERNEL32.dll722GetStartupInfoW
KERNEL32.dll724GetStdHandle
KERNEL32.dll729GetStringTypeW
KERNEL32.dll741GetSystemInfo
KERNEL32.dll747GetSystemTimeAsFileTime
KERNEL32.dll760GetTempPathW
KERNEL32.dll766GetThreadId
KERNEL32.dll771GetThreadPriority
KERNEL32.dll777GetTickCount
KERNEL32.dll782GetTimeFormatW
KERNEL32.dll784GetTimeZoneInformation
KERNEL32.dll788GetUserDefaultLCID
KERNEL32.dll795GetVersion
KERNEL32.dll797GetVersionExW
KERNEL32.dll839HeapAlloc
KERNEL32.dll843HeapFree
KERNEL32.dll846HeapReAlloc
KERNEL32.dll848HeapSize
KERNEL32.dll859InitOnceExecuteOnce
KERNEL32.dll864InitializeCriticalSection
KERNEL32.dll865InitializeCriticalSectionAndSpinCount
KERNEL32.dll869InitializeSListHead
KERNEL32.dll878InterlockedFlushSList
KERNEL32.dll897IsDebuggerPresent
KERNEL32.dll904IsProcessorFeaturePresent
KERNEL32.dll910IsValidCodePage
KERNEL32.dll912IsValidLocale
KERNEL32.dll916IsWow64Process
KERNEL32.dll948LCMapStringW
KERNEL32.dll960LeaveCriticalSection
KERNEL32.dll965LoadLibraryExA
KERNEL32.dll966LoadLibraryExW
KERNEL32.dll967LoadLibraryW
KERNEL32.dll978LocalFree
KERNEL32.dll989LockFileEx
KERNEL32.dll1010MultiByteToWideChar
KERNEL32.dll1038OpenProcess
KERNEL32.dll1049OutputDebugStringA
KERNEL32.dll1050OutputDebugStringW
KERNEL32.dll1059PeekNamedPipe
KERNEL32.dll1102QueryPerformanceCounter
KERNEL32.dll1103QueryPerformanceFrequency
KERNEL32.dll1107QueryThreadCycleTime
KERNEL32.dll1123RaiseException
KERNEL32.dll1137ReadConsoleW
KERNEL32.dll1140ReadFile
KERNEL32.dll1143ReadProcessMemory
KERNEL32.dll1201ReleaseMutex
KERNEL32.dll1203ReleaseSRWLockExclusive
KERNEL32.dll1210RemoveDirectoryW
KERNEL32.dll1223ResetEvent
KERNEL32.dll1232RtlCaptureStackBackTrace
KERNEL32.dll1236RtlUnwind
KERNEL32.dll1258SetConsoleCtrlHandler
KERNEL32.dll1297SetEndOfFile
KERNEL32.dll1301SetEnvironmentVariableW
KERNEL32.dll1303SetEvent
KERNEL32.dll1316SetFilePointerEx
KERNEL32.dll1331SetLastError
KERNEL32.dll1340SetNamedPipeHandleState
KERNEL32.dll1356SetStdHandle
KERNEL32.dll1376SetThreadPriority
KERNEL32.dll1391SetUnhandledExceptionFilter
KERNEL32.dll1407Sleep
KERNEL32.dll1409SleepConditionVariableSRW
KERNEL32.dll1410SleepEx
KERNEL32.dll1419SystemTimeToTzSpecificLocalTime
KERNEL32.dll1422TerminateProcess
KERNEL32.dll1440TlsAlloc
KERNEL32.dll1441TlsFree
KERNEL32.dll1442TlsGetValue
KERNEL32.dll1443TlsSetValue
KERNEL32.dll1445TransactNamedPipe
KERNEL32.dll1447TryAcquireSRWLockExclusive
KERNEL32.dll1455UnhandledExceptionFilter
KERNEL32.dll1457UnlockFileEx
KERNEL32.dll1475VerSetConditionMask
KERNEL32.dll1479VerifyVersionInfoW
KERNEL32.dll1486VirtualProtect
KERNEL32.dll1487VirtualProtectEx
KERNEL32.dll1488VirtualQuery
KERNEL32.dll1497WaitForSingleObject
KERNEL32.dll1498WaitForSingleObjectEx
KERNEL32.dll1504WaitNamedPipeW
KERNEL32.dll1505WakeAllConditionVariable
KERNEL32.dll1536WideCharToMultiByte
KERNEL32.dll1555WriteConsoleW
KERNEL32.dll1556WriteFile
KERNEL32.dll1565WriteProcessMemory
KERNEL32.dll1588lstrcmpiA

StringTable 040904b0

CompanyNameThe Chromium Authors
FileDescriptionChromium
FileVersion85.0.4183.102
InternalNamechrome_elf_dll
LegalCopyrightCopyright 2020 The Chromium Authors. All rights reserved.
OriginalFilenamechrome_elf.dll
ProductNameChromium
ProductVersion85.0.4183.102
CompanyShortNameThe Chromium Authors
ProductShortNameChromium
LastChangeffe848af6a5df4fa127e2929331116b7f9f1cb30-refs/branch-heads/4183@{#1770}
Official Build1

VS_FIXEDFILEINFO

FileVersion85.0.4183.102
ProductVersion85.0.4183.102
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0824320DLL09/04/2020 18:54:55#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0xc58e8