» chrome.dll
Overview
Analysis
File Details
Programs (1)

chrome.dll

Oxy

FINEDREAM INVEST LTD

This adware is a web browser extension that will inject advertising in the browser in the form of unwanted banners and text-links which may link to malware sites and install unwanted software. The module chrome.dll by FINEDREAM INVEST has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Oxy version 1.0 by Escolade Solutions LTD which is a potentially unwanted software program. It is distributed as part of the Brightcircle group of browser-extensions.

File name:

chrome.dll

Publisher:

Escolade Solutions LTD (signed by FINEDREAM INVEST LTD)

Product:

Oxy

Version:

24.0.1302.0

MD5:

de16dee8c905f5cefa745a1c7db20f92

SHA-1:

a119b14cfe04a09fa188cf59bb43d8e4b5b1be5f

SHA-256:

338efa646f99e08133bb8e199d6ce7abdbd698f7d3b9c39deff473d6af225417

Scanner detections:

1 / 68

Status:

Adware

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

5/7/2024 6:33:18 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.FINEDREAMINVEST.G

14.8.7.22

File size:

48.3 MB (50,640,256 bytes)

Product version:

24.0.1302.0

Original file name:

chrome.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\oxy\application\24.0.1302.0\chrome.dll

Digital Signature

Signed by:

FINEDREAM INVEST LTD

Authority:

COMODO CA Limited

Valid from:

10/1/2013 12:00:00 AM

Valid to:

10/1/2014 11:59:59 PM

Subject:

CN=FINEDREAM INVEST LTD, O=FINEDREAM INVEST LTD, STREET=11 ROSEMONT ROAD HAMPSTEAD, L=LONDON, S=HAMPSTEAD, PostalCode=NW3 6NG, C=GB

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00C5ED3DAB73641CD0D161EE50202FB462

File PE Metadata

Compilation timestamp:

8/26/2013 9:52:29 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

1572864:M/pkdLK9FqXYanKiVT0NEyOJNJrTY+9RyuGGXuZU5r9HPFRO2DPN71/RhHJcRG6I:tAGpdbiy

Entry address:

0x721B

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, FD, 41, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 83, 25, 24, 34, 69, 04, 00, C3, 57, 8B, C6, 83, E0, 0F, 85, C0, 0F, 85, C1, 00, 00, 00, 8B, D1, 83, E1, 7F, C1, EA, 07, 74, 65, EB, 06, 8D, 9B, 00, 00, 00, 00, 66, 0F, 6F, 06, 66, 0F, 6F, 4E, 10, 66, 0F, 6F, 56, 20, 66, 0F, 6F, 5E, 30, 66, 0F, 7F, 07, 66, 0F, 7F, 4F, 10, 66, 0F, 7F, 57, 20, 66, 0F, 7F, 5F, 30, 66, 0F, 6F, 66, 40, 66, 0F, 6F, 6E, 50, 66, 0F, 6F, 76, 60... 
[+]

Code size:

34.7 MB (36,337,152 bytes)

The file chrome.dll has been discovered within the following program.

Oxy version 1.0 by Escolade Solutions LTD

Distributed by FINEDREAM INVEST LTD, this is a bundled adware program.

www.product-placements.com

85% remove it

Remove chrome.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.