chrome.exe - Chromium

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	chrome.exe
size	711680 (0xadc00)
md5	df4b615bb5373576eaccec195e7f88aa

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x110

Rich Header

lib id	version	times used
158	40219	40
170	40219	192
171	30319	3
188	30716	1
190	30716	2
185	30716	26
156	40219	3
1	0	365
171	40219	314
155	40219	1
154	40219	1
151	0	2
157	40219	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x53069904
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x122
Magic	0x10b
LinkerVersion	10.0
SizeOfCode	0x63600
SizeOfInitializedData	0x4da00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x48a97
BaseOfCode	0x1000
BaseOfData	0x65000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0xb6000
SizeOfHeaders	0x400
CheckSum	0xba46a
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x634b9	0x63600	R-X CODE
.rdata	0x65000	0x2d111	0x2d200	R-- IDATA
.data	0x93000	0x5460	0x1e00	RW- IDATA
.tls	0x99000	2	0x200	RW- IDATA
.rsrc	0x9a000	0x129e8	0x12a00	R-- IDATA
.reloc	0xad000	0x84fe	0x8600	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x91fe0	0x131
IMPORT	0x90a50	0xc8
RESOURCE	0x9a000	0x129e8
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0xad000	0x428c
DEBUG	0x65420	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x8f5a0	0x18
LOAD_CONFIG	0x8f558	0x40
Bound_IAT	0	0
IAT	0x65000	0x38c
Delay_IAT	0x9094c	0x60
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x499000	0x499001	0x49646c	0x4653f8	0	0

show previews

type	name	size
GOOGLEUPDATEAPPLICATIONCOMMANDS	#1	4
ICON	#1	3752
ICON	#2	2216
ICON	#3	1384
ICON	#4	23334
ICON	#5	9640
ICON	#6	4264
ICON	#7	2440
ICON	#8	1128
ICON	#9	3752
ICON	#10	2216
ICON	#11	1384
ICON	#12	1992
ICON	#13	9640
ICON	#14	4264
ICON	#15	1128
GROUP_ICON	IDR_MAINFRAME	118
GROUP_ICON	IDR_X_APP_LIST	104
VERSION	#1	1024
MANIFEST	#1	1234

module_name	hint	function_name
chrome_elf.dll		CreateFileW
chrome_elf.dll	2	SignalChromeElf
VERSION.dll	8	GetFileVersionInfoW
VERSION.dll	16	VerQueryValueW
VERSION.dll	7	GetFileVersionInfoSizeW
WINMM.dll	148	timeGetTime
SHLWAPI.dll	144	PathRemoveFileSpecW
KERNEL32.dll	966	LoadResource
KERNEL32.dll	420	FindResourceW
KERNEL32.dll	1454	VirtualFree
KERNEL32.dll	1288	SetFilePointer
KERNEL32.dll	1112	ReadFile
KERNEL32.dll	750	GetSystemInfo
KERNEL32.dll	1451	VirtualAlloc
KERNEL32.dll	1175	ReleaseMutex
KERNEL32.dll	618	GetLastError
KERNEL32.dll	1303	SetLastError
KERNEL32.dll	239	CreateProcessW
KERNEL32.dll	229	CreateMutexW
KERNEL32.dll	1521	WriteFile
KERNEL32.dll	1044	OutputDebugStringA
KERNEL32.dll	435	FormatMessageA
KERNEL32.dll	973	LocalFree
KERNEL32.dll	1084	QueryPerformanceCounter
KERNEL32.dll	756	GetSystemTimeAsFileTime
KERNEL32.dll	1085	QueryPerformanceFrequency
KERNEL32.dll	1387	SystemTimeToFileTime
KERNEL32.dll	1420	TzSpecificLocalTimeToSystemTime
KERNEL32.dll	795	GetUserDefaultLangID
KERNEL32.dll	1274	SetEnvironmentVariableW
KERNEL32.dll	578	GetEnvironmentVariableW
KERNEL32.dll	202	CreateEventW
KERNEL32.dll	369	ExpandEnvironmentStringsW
KERNEL32.dll	654	GetNativeSystemInfo
KERNEL32.dll	803	GetVersionExW
KERNEL32.dll	870	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	286	DeleteCriticalSection
KERNEL32.dll	320	EnterCriticalSection
KERNEL32.dll	957	LeaveCriticalSection
KERNEL32.dll	708	GetProcessTimes
KERNEL32.dll	590	GetFileAttributesW
KERNEL32.dll	198	CreateDirectoryW
KERNEL32.dll	769	GetTempPathW
KERNEL32.dll	631	GetLongPathNameW
KERNEL32.dll	541	GetCurrentDirectoryW
KERNEL32.dll	1077	QueryDosDeviceW
KERNEL32.dll	987	MapViewOfFile
KERNEL32.dll	211	CreateFileMappingW
KERNEL32.dll	1565	lstrlenW
KERNEL32.dll	552	GetCurrentThreadId
KERNEL32.dll	1301	SetInformationJobObject
KERNEL32.dll	1205	ResumeThread
KERNEL32.dll	45	AssignProcessToJobObject
KERNEL32.dll	142	CloseHandle
KERNEL32.dll	1300	SetHandleInformation
KERNEL32.dll	984	LockResource
KERNEL32.dll	622	GetLocaleInfoW
KERNEL32.dll	797	GetUserDefaultUILanguage
KERNEL32.dll	899	IsDebuggerPresent
KERNEL32.dll	1096	RaiseException
KERNEL32.dll	1375	Sleep
KERNEL32.dll	257	CreateThread
KERNEL32.dll	747	GetSystemDirectoryW
KERNEL32.dll	814	GetWindowsDirectoryW
KERNEL32.dll	1032	OpenProcess
KERNEL32.dll	700	GetProcessId
KERNEL32.dll	878	InterlockedExchange
KERNEL32.dll	853	HeapSetInformation
KERNEL32.dll	875	InterlockedCompareExchange
KERNEL32.dll	429	FlushFileBuffers
KERNEL32.dll	1391	TerminateProcess
KERNEL32.dll	640	GetModuleHandleExW
KERNEL32.dll	1360	SetUnhandledExceptionFilter
KERNEL32.dll	1436	UnregisterWaitEx
KERNEL32.dll	1169	RegisterWaitForSingleObject
KERNEL32.dll	1411	TlsGetValue
KERNEL32.dll	1410	TlsFree
KERNEL32.dll	1412	TlsSetValue
KERNEL32.dll	1409	TlsAlloc
KERNEL32.dll	720	GetQueuedCompletionStatus
KERNEL32.dll	219	CreateIoCompletionPort
KERNEL32.dll	1055	PostQueuedCompletionStatus
KERNEL32.dll	1198	ResetEvent
KERNEL32.dll	1276	SetEvent
KERNEL32.dll	1465	WaitForMultipleObjects
KERNEL32.dll	240	CreateRemoteThread
KERNEL32.dll	1455	VirtualFreeEx
KERNEL32.dll	1452	VirtualAllocEx
KERNEL32.dll	1457	VirtualProtect
KERNEL32.dll	436	FormatMessageW
KERNEL32.dll	1312	SetNamedPipeHandleState
KERNEL32.dll	1530	WriteProcessMemory
KERNEL32.dll	1458	VirtualProtectEx
KERNEL32.dll	1390	TerminateJobObject
KERNEL32.dll	869	InitializeCriticalSection
KERNEL32.dll	1373	SignalObjectAndWait
KERNEL32.dll	697	GetProcessHandleCount
KERNEL32.dll	770	GetThreadContext
KERNEL32.dll	599	GetFileType
KERNEL32.dll	881	InterlockedIncrement
KERNEL32.dll	877	InterlockedDecrement
KERNEL32.dll	221	CreateJobObjectW
KERNEL32.dll	231	CreateNamedPipeW
KERNEL32.dll	1067	ProcessIdToSessionId
KERNEL32.dll	1215	SearchPathW
KERNEL32.dll	276	DebugBreak
KERNEL32.dll	1115	ReadProcessMemory
KERNEL32.dll	1384	SuspendThread
KERNEL32.dll	490	GetComputerNameExW
KERNEL32.dll	969	LocalAlloc
KERNEL32.dll	1374	SizeofResource
KERNEL32.dll	547	GetCurrentProcess
KERNEL32.dll	313	DuplicateHandle
KERNEL32.dll	960	LoadLibraryA
KERNEL32.dll	440	FreeLibrary
KERNEL32.dll	638	GetModuleHandleA
KERNEL32.dll	784	GetTickCount
KERNEL32.dll	548	GetCurrentProcessId
KERNEL32.dll	879	InterlockedExchangeAdd
KERNEL32.dll	577	GetEnvironmentVariableA
KERNEL32.dll	483	GetCommandLineW
KERNEL32.dll	963	LoadLibraryW
KERNEL32.dll	1263	SetCurrentDirectoryW
KERNEL32.dll	962	LoadLibraryExW
KERNEL32.dll	637	GetModuleFileNameW
KERNEL32.dll	693	GetProcAddress
KERNEL32.dll	1273	SetEnvironmentVariableA
KERNEL32.dll	791	GetTimeZoneInformation
KERNEL32.dll	1520	WriteConsoleW
KERNEL32.dll	446	GetACP
KERNEL32.dll	672	GetOEMCP
KERNEL32.dll	909	IsValidCodePage
KERNEL32.dll	794	GetUserDefaultLCID
KERNEL32.dll	620	GetLocaleInfoA
KERNEL32.dll	351	EnumSystemLocalesA
KERNEL32.dll	911	IsValidLocale
KERNEL32.dll	569	GetDriveTypeW
KERNEL32.dll	167	CompareStringW
KERNEL32.dll	1179	ReleaseSemaphore
KERNEL32.dll	1206	RtlCaptureContext
KERNEL32.dll	245	CreateSemaphoreW
KERNEL32.dll	1467	WaitForSingleObject
KERNEL32.dll	581	GetExitCodeProcess
KERNEL32.dll	641	GetModuleHandleW
KERNEL32.dll	1474	WaitNamedPipeW
KERNEL32.dll	1414	TransactNamedPipe
KERNEL32.dll	733	GetStdHandle
KERNEL32.dll	1460	VirtualQueryEx
KERNEL32.dll	854	HeapSize
KERNEL32.dll	1299	SetHandleCount
KERNEL32.dll	576	GetEnvironmentStringsW
KERNEL32.dll	439	FreeEnvironmentStringsW
KERNEL32.dll	847	HeapCreate
KERNEL32.dll	904	IsProcessorFeaturePresent
KERNEL32.dll	1210	RtlUnwind
KERNEL32.dll	461	GetCPInfo
KERNEL32.dll	945	LCMapStringW
KERNEL32.dll	1327	SetStdHandle
KERNEL32.dll	845	HeapAlloc
KERNEL32.dll	852	HeapReAlloc
KERNEL32.dll	610	GetFullPathNameW
KERNEL32.dll	520	GetConsoleMode
KERNEL32.dll	502	GetConsoleCP
KERNEL32.dll	727	GetStartupInfoW
KERNEL32.dll	365	ExitProcess
KERNEL32.dll	849	HeapFree
KERNEL32.dll	1424	UnhandledExceptionFilter
KERNEL32.dll	279	DecodePointer
KERNEL32.dll	316	EncodePointer
KERNEL32.dll	1004	MultiByteToWideChar
KERNEL32.dll	738	GetStringTypeW
KERNEL32.dll	1501	WideCharToMultiByte
ADVAPI32.dll	723	SetEntriesInAclW
ADVAPI32.dll	354	GetSecurityInfo
ADVAPI32.dll	146	CreateWellKnownSid
ADVAPI32.dll	133	CopySid
ADVAPI32.dll	429	LookupPrivilegeValueW
ADVAPI32.dll	280	EqualSid
ADVAPI32.dll	238	DuplicateToken
ADVAPI32.dll	239	DuplicateTokenEx
ADVAPI32.dll	142	CreateRestrictedToken
ADVAPI32.dll	750	SetThreadToken
ADVAPI32.dll	131	ConvertStringSidToSidW
ADVAPI32.dll	330	GetLengthSid
ADVAPI32.dll	751	SetTokenInformation
ADVAPI32.dll	700	RevertToSelf
ADVAPI32.dll	625	RegDisablePredefinedCache
ADVAPI32.dll	798	SystemFunction036
ADVAPI32.dll	139	CreateProcessAsUserW
ADVAPI32.dll	530	OpenProcessToken
ADVAPI32.dll	367	GetTokenInformation
ADVAPI32.dll	123	ConvertSidToStringSidW
ADVAPI32.dll	609	RegCreateKeyExW
ADVAPI32.dll	649	RegOpenKeyExW
ADVAPI32.dll	600	RegCloseKey
ADVAPI32.dll	662	RegQueryValueExW
ADVAPI32.dll	678	RegSetValueExW
ADVAPI32.dll	677	RegSetValueExA
ADVAPI32.dll	378	GetUserNameW
USER32.dll	80	CloseWindowStation
USER32.dll	76	CloseDesktop
USER32.dll	402	GetProcessWindowStation
USER32.dll	97	CreateDesktopW
USER32.dll	747	SetProcessWindowStation
USER32.dll	429	GetThreadDesktop
USER32.dll	439	GetUserObjectInformationW
USER32.dll	117	CreateWindowStationW
USER32.dll	886	wsprintfW
USER32.dll	265	FindWindowExW
USER32.dll	587	MessageBoxW
USER32.dll	466	GetWindowThreadProcessId
USER32.dll	6	AllowSetForegroundWindow
USER32.dll	696	SendMessageTimeoutW
USER32.dll	528	IsWindow
USER32.dll	279	GetAsyncKeyState
USERENV.dll	34	GetProfileType
WTSAPI32.dll	34	WTSQuerySessionInformationW
WTSAPI32.dll	19	WTSFreeMemory

ord	entry_va	function_name
1	0x266a0	ClearCrashKeyValueImpl
2	0x25ff0	CrashForException
3	0x25da0	DumpProcess
4	0x25db0	DumpProcessWithoutCrash
5	0x263b0	InjectDumpForHangDebugging
6	0x25dd0	InjectDumpProcessWithoutCrash
7	0x29190	IsSandboxedProcess
8	0x273b0	SetCrashKeyValueImpl

module_name	chrome.exe
flags	0
timestamp	2014-02-21 00:08:35
version	0.0
ordinal_base	1
nFunctions	8
nNames	8
Names(8)	0x92028
Functions(8)	0x92008
NameOrdinals(8)	0x92048

StringTable 040904b0

CompanyName	The Chromium Authors
FileDescription	Chromium
FileVersion	35.0.1850.0
InternalName	chrome_exe
LegalCopyright	Copyright 2013 The Chromium Authors. All rights reserved.
OriginalFilename	chrome.exe
ProductName	Chromium
ProductVersion	35.0.1850.0
CompanyShortName	The Chromium Authors
ProductShortName	Chromium
LastChange	252272
Official Build	0

VS_FIXEDFILEINFO

FileVersion	35.0.1850.0
ProductVersion	35.0.1850.0
StrucVersion	0x10000
FileFlagsMask	0x17
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	711680	EXE	02/21/2014 00:08:36	#
15c1	15	HTM		#
94d88	23334	PNG	(256 x 256)	#
a0a20	1992	PNG	(256 x 256)	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x9646c

chrome.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904b0

VS_FIXEDFILEINFO

chrome.exe
-