» sbrowser.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

sbrowser.exe

FlashPeak SlimBrowser

FlashPeak Inc

This is installed with FlashPeak SlimBrowser.

File name:

sbrowser.exe

Publisher:

FlashPeak, Inc. (signed by FlashPeak Inc)

Product:

FlashPeak SlimBrowser

Version:

5.01.006

MD5:

d7e87c26a39f70d5530a4a14dda51fd5

SHA-1:

450d73b60956510ac67277acf575d9d23c3fb9fc

SHA-256:

243ce38e88fdb7b3c0984c1687adf0830b8687ff01ca1204210af7dd54717f55

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/24/2024 12:33:05 PM UTC (today)

File size:

2.7 MB (2,782,008 bytes)

Product version:

5.01.006

Trademarks:

SlimBrowser(TM)

Original file name:

SlimBrowser.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\slimbrowser\sbrowser.exe

Digital Signature

Signed by:

FlashPeak Inc

Authority:

VeriSign, Inc.

Valid from:

4/1/2010 5:00:00 PM

Valid to:

4/2/2011 4:59:59 PM

Subject:

CN=FlashPeak Inc, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=FlashPeak Inc, L=Austin, S=Texas, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

2A8DBEB733D3AF3EAB7B0BA080A0FFE9

File PE Metadata

Compilation timestamp:

2/2/2011 12:54:16 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:zMaq1lKlYZrAsiMDB8oix8Ezpqv/VnC7QOgrg+bcU:zPoZa8VnqQOeg+l

Entry address:

0x14D105

Entry point:

E8, A1, A6, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, A8, 3C, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 3C, A8, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, 97, 21, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, 96, 0E, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73, 0E, E8, 59, 3C, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, AD... 
[+]

Entropy:

6.1895

Code size:

1.5 MB (1,601,536 bytes)

Shell Open Command

Open type:

ftp

Command:

"C:\Program Files\slimbrowser\sbrowser.exe" -nosp -ni

The file sbrowser.exe has been discovered within the following program.

FlashPeak SlimBrowser by FlashPeak Inc.

FlashPeak SlimBrowser bundles a branded version of the Conduit Toolbar, which delivers search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar. Once accepted, the packaged executable, ConduitInstaller.

www.slimbrowser.net

About 5% of users remove it

Scan sbrowser.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.