home

chromemodule.dll

The module chromemodule.dll has been detected as a potentially unwanted program by 3 anti-malware scanners. This file is typically installed with the program Search Protect by conduit by Conduit Ltd. which is a potentially unwanted software program.
MD5:
44fe52f3f90fc5f43f966ced638794cf

SHA-1:
e0d13f546350c8d404da7a6c32fc136f15fe6952

SHA-256:
53ac71713c683cfa0b124e3ce590f4c1013823e105c5afc286d9e64862edbe56

Scanner detections:
3 / 68

Status:
Potentially unwanted

Explanation:
Part of the Conduit/ClientConnect toolbar/extension distribution.

Analysis date:
4/26/2024 10:46:14 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Trash.Gen
8.3.1.6

Reason Heuristics
PUP.SearchProtect
16.10.5.19

Sophos
PUA 'Conduit Search Protect'
5.14

File size:
817.3 KB (836,896 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\roaming\searchprotect\bin\chromemodule.dll

File PE Metadata
Compilation timestamp:
5/8/2013 12:16:33 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:fT2NyDITftCeL4Gb7EWV21mqET1fZ/JTag4/:fNT8VEWV+iT1fxlag4/

Entry address:
0x6ECC0

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 4A, 03, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, 6A, 14, 68, 38, 15, 09, 10, E8, 61, 07, 00, 00, FF, 35, CC, DA, 0A, 10, 8B, 35, 48, 50, 08, 10, FF, D6, 89, 45, E4, 83, F8, FF, 75, 0C, FF, 75, 08, FF, 15, 38, 52, 08, 10, 59, EB, 64, 6A, 08, E8, C2, 07, 00, 00, 59, 83, 65, FC, 00, FF, 35, CC, DA, 0A, 10, FF, D6, 89, 45, E4, FF, 35, C8, DA, 0A, 10, FF, D6, 89, 45, E0, 8D, 45, E0, 50, 8D, 45, E4, 50, FF, 75, 08, 8B, 35...
 
[+]

Entropy:
6.3211

Code size:
525.5 KB (538,112 bytes)

The file chromemodule.dll has been discovered within the following program.

Search Protect by conduit  by Conduit Ltd.
The Conduit Search Protect software is designed to prevent other competing web browser plugins from changing the homepage and search settings that are created by the Conduit OurToolbar from being changed automatically. It is typically installed with various Community toolbars.
www.conduit.com/privacy/search-protect-privacy-policy.aspx
82% remove it
 
Powered by Should I Remove It?

Remove chromemodule.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.