» sbframe.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

sbframe.exe

FlashPeak SlimBrowser

FlashPeak Inc

It runs as a scheduled task under the Windows Task Scheduler. This is installed with FlashPeak SlimBrowser.

File name:

sbframe.exe

Publisher:

FlashPeak Inc. (signed by FlashPeak Inc)

Product:

FlashPeak SlimBrowser

Version:

7.00.111

MD5:

3fba168f10c3681a644f2f12763ce213

SHA-1:

ce13defe20cd14bcf7ee94b6ad9f844c571bb56c

SHA-256:

5ab1752c72615a91e99173044b0b41dcb90070259e92c7aede64d9b56476dc77

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 10:43:36 AM UTC (today)

File size:

4.3 MB (4,478,752 bytes)

Product version:

7.00.111

Trademarks:

SlimBrowser(TM)

Original file name:

SlimBrowser.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\slimbrowser\sbframe.exe

Digital Signature

Signed by:

FlashPeak Inc

Authority:

VeriSign, Inc.

Valid from:

4/22/2014 3:00:00 AM

Valid to:

7/22/2017 2:59:59 AM

Subject:

CN=FlashPeak Inc, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=FlashPeak Inc, L=Austin, S=Texas, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3DFE0BA55DE3A30C4BDFC4E79E5D8DC9

File PE Metadata

Compilation timestamp:

11/24/2014 11:01:31 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:Gx1BkKzGim3GVY8piEPybEIz2Y2Azr+5+VjcdXUNO3RjX3wETIVFNSjJncmZl+UV:G+n2FUb32ArNO3RoVFNSjZl+fPO

Entry address:

0x25F4F8

Entry point:

E8, EA, C0, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00, 8B, 03, 64, A3, 00, 00, 00, 00, 8B, 45, 08, 8B, 5D, 0C, 8B, 6D, FC, 8B, 63, FC, FF, E0, 5B, C9, C2, 08, 00, 58, 59, 87, 04, 24, FF, E0, 8B, FF, 55, 8B, EC, 51, 51, 53, 56, 57, 64, 8B, 35, 00, 00, 00, 00, 89, 75, FC, C7, 45, F8, 66, F5, 65, 00, 6A, 00, FF, 75, 0C, FF, 75, F8, FF, 75, 08, E8, E4, 74, 02, 00, 8B, 45, 0C, 8B, 40, 04, 83, E0, FD, 8B, 4D, 0C, 89, 41, 04, 64, 8B, 3D... 
[+]

Entropy:

6.3107

Code size:

2.7 MB (2,851,328 bytes)

Scheduled Task

Task name:

{480736D2-B408-481D-A15F-1B65E723D2F3}

Trigger:

Registration (Runs on registration)

Action:

sbframe.exe httC:\www.skype.com\go\downloading?source=lightin

The file sbframe.exe has been discovered within the following program.

FlashPeak SlimBrowser by FlashPeak Inc.

FlashPeak SlimBrowser bundles a branded version of the Conduit Toolbar, which delivers search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar. Once accepted, the packaged executable, ConduitInstaller.

www.slimbrowser.net

About 5% of users remove it

Scan sbframe.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.