filenameKit64big.exe
size374784 (0x5b800)
md55f596d127415a0600a9f8973c7027ec4
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1473072910
257319352
2613193519
2603193510
259319353
257293953
1069
264322174
255322171
15101
258322171

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x662f576f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22
Magic0x20b
LinkerVersion14.35
SizeOfCode0x1200
SizeOfInitializedData0x5a800
SizeOfUninitializedData0
AddressOfEntryPoint0x15dc
BaseOfCode0x1000
ImageBase0x140000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x61000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8160
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MASM/TASM - sig4

Sections

namevavsizeraw sizeflags
.text0x10000x10ec0x1200R-X CODE
.rdata0x30000x11680x1200R-- IDATA
.data0x50000x588c80x58400RW- IDATA
.pdata0x5e0000x1980x200R-- IDATA
.rsrc0x5f0000x6700x800R-- IDATA
.reloc0x600000x300x200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x399c0xa0
RESOURCE0x5f0000x670
EXCEPTION0x5e0000x198
SECURITY00
BASERELOC0x600000x30
DEBUG0x34200x70
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x32e00x140
Bound_IAT00
IAT0x30000x208
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#111040
MANIFEST#13810
module_namehintordfunction_name
KERNEL32.dll649GetModuleHandleA
KERNEL32.dll251CreateThread
KERNEL32.dll708GetProcAddress
KERNEL32.dll803GetTickCount
KERNEL32.dll1164ReadFile
KERNEL32.dll227CreateNamedPipeA
KERNEL32.dll1597WriteFile
KERNEL32.dll1447Sleep
KERNEL32.dll203CreateFileA
KERNEL32.dll142CloseHandle
KERNEL32.dll164ConnectNamedPipe
KERNEL32.dll554GetCurrentProcess
KERNEL32.dll1538WaitForSingleObject
KERNEL32.dll559GetCurrentThreadId
KERNEL32.dll1124QueryPerformanceCounter
KERNEL32.dll555GetCurrentProcessId
KERNEL32.dll769GetSystemTimeAsFileTime
KERNEL32.dll897InitializeSListHead
KERNEL32.dll1257RtlCaptureContext
KERNEL32.dll1265RtlLookupFunctionEntry
KERNEL32.dll1462TerminateProcess
KERNEL32.dll652GetModuleHandleW
KERNEL32.dll926IsProcessorFeaturePresent
KERNEL32.dll1431SetUnhandledExceptionFilter
KERNEL32.dll1496UnhandledExceptionFilter
KERNEL32.dll919IsDebuggerPresent
KERNEL32.dll1272RtlVirtualUnwind
VCRUNTIME140.dll27__current_exception
VCRUNTIME140.dll60memcpy
VCRUNTIME140.dll8__C_specific_handler
VCRUNTIME140.dll28__current_exception_context
VCRUNTIME140.dll62memset
api-ms-win-crt-stdio-l1-1-0.dll13__stdio_common_vsprintf
api-ms-win-crt-stdio-l1-1-0.dll1__p__commode
api-ms-win-crt-stdio-l1-1-0.dll84_set_fmode
api-ms-win-crt-heap-l1-1-0.dll22_set_new_mode
api-ms-win-crt-heap-l1-1-0.dll24free
api-ms-win-crt-heap-l1-1-0.dll25malloc
api-ms-win-crt-runtime-l1-1-0.dll52_initialize_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll61_register_thread_local_exe_atexit_callback
api-ms-win-crt-runtime-l1-1-0.dll30_crt_atexit
api-ms-win-crt-runtime-l1-1-0.dll103terminate
api-ms-win-crt-runtime-l1-1-0.dll21_c_exit
api-ms-win-crt-runtime-l1-1-0.dll22_cexit
api-ms-win-crt-runtime-l1-1-0.dll85exit
api-ms-win-crt-runtime-l1-1-0.dll5__p___argv
api-ms-win-crt-runtime-l1-1-0.dll60_register_onexit_function
api-ms-win-crt-runtime-l1-1-0.dll35_exit
api-ms-win-crt-runtime-l1-1-0.dll55_initterm_e
api-ms-win-crt-runtime-l1-1-0.dll54_initterm
api-ms-win-crt-runtime-l1-1-0.dll40_get_initial_narrow_environment
api-ms-win-crt-runtime-l1-1-0.dll51_initialize_narrow_environment
api-ms-win-crt-runtime-l1-1-0.dll24_configure_narrow_argv
api-ms-win-crt-runtime-l1-1-0.dll4__p___argc
api-ms-win-crt-runtime-l1-1-0.dll66_set_app_type
api-ms-win-crt-runtime-l1-1-0.dll64_seh_filter_exe
api-ms-win-crt-math-l1-1-0.dll9__setusermatherr
api-ms-win-crt-locale-l1-1-0.dll8_configthreadlocale

StringTable 040904B0

CompanyNameGoogle LLC
FileDescriptionGoogle Chrome
FileVersion124.0.6367.63
InternalNamechrome_exe
LegalCopyrightCopyright 2024 Google LLC. All rights reserved.
OriginalFilenamechrome.exe
ProductNameGoogle Chrome
ProductVersion124.0.6367.63
CompanyShortNameGoogle
ProductShortNameChrome
LastChange8771130bd84f76d855ae42fbe02752b03e352f17-refs/branch-heads/6367@{#798}
Official Build1

VS_FIXEDFILEINFO

FileVersion10.0.19041.1266
ProductVersion10.0.19041.1266
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d0369200BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK