» chrome_frame_helper.exe
Overview
Analysis
File Details
Programs (2)
Downloads (1)

chrome_frame_helper.exe

Google Chrome Frame

Google Inc

This is a setup program which is used to install the application. This is installed with multiple programs including Google Chrome Frame and Google Chrome. The file has been seen being downloaded from s6545.chomikuj.pl.

File name:

chrome_frame_helper.exe

Publisher:

Google Inc. (signed by Google Inc)

Product:

Google Chrome Frame

Description:

Chrome Frame renders the Web of the future in the browsers of the past. It's like strapping a rocket engine to a minivan.

Version:

32.0.1700.102

MD5:

35129acf1780f3b7222073affec4365c

SHA-1:

2847c28c8981f029dbfa2aa6c25cc1f158584b24

SHA-256:

79fe355b9ebf81509c25bdc99f894bd442cbfa2f5f415fb07160da5466e58d48

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

11/24/2024 2:54:30 AM UTC (today)

File size:

81.8 KB (83,736 bytes)

Product version:

32.0.1700.102

Original file name:

chrome_frame_helper.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\google\chrome\application\32.0.1700.102\chrome_frame_helper.exe

Digital Signature

Signed by:

Google Inc

Authority:

VeriSign, Inc.

Valid from:

11/14/2011 2:00:00 AM

Valid to:

11/14/2014 1:59:59 AM

Subject:

CN=Google Inc, OU=Digital ID Class 3 - Java Object Signing, O=Google Inc, L=Mountain View, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

09E28B26DB593EC4E73286B66499C370

File PE Metadata

Compilation timestamp:

1/23/2014 5:20:25 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

1536:t9YVCse/+G47PBGhiWS0cy+Gj1Msa1Kz1mFkuTsrA2AfF4JXh:cJBGKgiWncy+o1z1isryfF4Jx

Entry address:

0x39FF

Entry point:

E8, 4B, 32, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, A3, DC, 26, 41, 00, 5D, C3, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A1, AC, 10, 41, 00, 33, C5, 89, 45, FC, 53, 8B, 5D, 08, 57, 83, FB, FF, 74, 07, 53, E8, AD, 32, 00, 00, 59, 83, A5, E0, FC, FF, FF, 00, 6A, 4C, 8D, 85, E4, FC, FF, FF, 6A, 00, 50, E8, 3B, 0F, 00, 00, 8D, 85, E0, FC, FF, FF, 89, 85, D8, FC, FF, FF, 8D, 85, 30, FD, FF, FF, 83, C4, 0C, 89, 85, DC, FC, FF, FF, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8... 
[+]

Code size:

47 KB (48,128 bytes)

The file chrome_frame_helper.exe has been discovered within the following programs.

Google Chrome by Google Inc

Google Chrome is a free web browser developed by Google that uses the WebKit layout engine. It is designed to be secure, fast, simple and stable. Chrome supports plug-ins with the Netscape Plugin Application Programming Interface (NPAPI).

www.google.com/chrome

6% remove it

Google Chrome Frame by Google Inc

Publisher's description - “Google Chrome Frame is a free plug-in for Internet Explorer. Some advanced web apps use Google Chrome Frame to provide you with additional features and better performance. Sites that utilize Google Chrome Frame become more responsive.”

www.google.com/chromeframe

12% remove it

The file chrome_frame_helper.exe has been seen being distributed by the following URL.

http://s6545.chomikuj.pl/File.aspx?e=yycdmxNYGtXvf9Y5m3cmu-CmY1RImwUscr-z6hJ0ZdIDgfFyWXV7Fr-6ZWJm_bYUuXb7PGNZfntMzq28mulH0QtUcR8e6LfonPJ2rOjUW-9Q4iMKnbPa0pJCDLK7dH_lq0boGJRJSQJv7_CKRnRUpg&pv=2

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.