home

chromesetup_fr.exe

web

MICROMAX STUDIO, S.L.

The application chromesetup_fr.exe, “web Setup ” by MICROMAX STUDIO, S.L has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.hostapplicationcenter.com and multiple other hosts.
Publisher:
program   (signed by MICROMAX STUDIO, S.L.)

Product:
web

Description:
web Setup

MD5:
8092e80b7335c65ebf2c84914b4e60b3

SHA-1:
af764d290dfcf2fbbce758815ed5b7bf47f25e60

SHA-256:
ce7504f5fee854ffc65a690dc48958bb9798c44d94000a2e9384b073af20e55d

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/23/2024 2:46:36 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.MICROMAXSTUDIO.Installer (M)
16.2.8.18

File size:
925.6 KB (947,864 bytes)

Product version:
1.4

Copyright:
Installer

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\chromesetup_fr.exe

Digital Signature
Signed by:
MICROMAX STUDIO, S.L.

Authority:
GoDaddy.com, Inc.

Valid from:
9/1/2015 11:11:38 AM

Valid to:
9/1/2016 11:11:38 AM

Subject:
CN="MICROMAX STUDIO, S.L.", O="MICROMAX STUDIO, S.L.", L=Madrid, C=ES

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
79A6DBFB5606456E

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:nPGpGzYF+yUzNMw8HvgNO6Fxh9kfioAqR8LmQc/JT7/GVOzqVXqKty86GzBL2HAI:nPG4FzyfPgNHTzq5+Ldc/l6qezF2Hx

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file chromesetup_fr.exe has been seen being distributed by the following 40 URLs.

http://www.hostapplicationcenter.com/c?x=Hoc kTbQtoUlx1QoX AzKa2hYtk9LMyMEoekSCnsGK0=&c=eA8jmwm1jFbpj7EDYFU380iP4n6LCAcLIlZ0cGwkmTITgtrlFzOtAr2XpK7gFFrUkkQLXULK0C4ZvtAVekYz4 k46 q/kykW u9JDIWm 34H a8EfJEzdezwzX4bpTmO&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.megabundlestag.com/c?x=nqQgSLkz7n2v9xdX8iZEHGb3maNsLzX7AJPEucUv2Kc=&c=z4QRpQLg7I2ovrE5MahYdzNN4y6H4w25HX1uCQqhxUmtldg hWtlZt/YzQk48g1wO6i d51y6lDrV57OcIjQ4z21/kIaGz HdX9AzwUcNqGlxHcZ/LCL58gCDRZdOPQS&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.grabfarmtown.com/c?x=hweg8D07NIrgM3ehSg9U/27HEphi1UQ/hDRd5Rrk/m4=&c=0zvZTTSwwFIoy3GB8vec1gLmLIh7lT nEf0Pr EJZ712N6GkgTo N8Kwjk8KZLSVpuWtuu6dImjprFZEIeSAx7K3DoH10HSYavoY0gPd7hT8GO36ILFAA6oDdc2APTJQ&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.downloadsapplicationtours.com/c?x=lWbqWsY/6FGIv8GPsC63MXLxAmX d3uob03C8HpVSUk=&c=agtdUjaSyN4eeYf5Z/JMUPTnEfN7OJDm1EuFrEYdJK5lIwkQn35F3X9 CZT4gWYOWValQLa nnCUYZ1NIQOHDijmgZTCSAPkkRpEFByYduwldVEzoBo9c8 8ZmscfHTV&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.bulkapplicationstown.com/c?x=Nh1 kdiORyVXQgGAYgOR0qysJ8vQUeCctSrmYVDg9to=&c=dNumx5cIjCq3vBwUhzWxPf7K5WYKNue9Vxt0zdWuH7Bfkxr6OXYfBH/0HZUrXPWogd1Q84r68hYzihWZrWKxPN4ZffVCje3fOefRbDMDlOSQXTN7jhEzCf1JEcUPYTiO&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.toursdownloadhost.com/c?x=NWN0Ys0XqmWDWeVeKCzST ywEw aH3vLvST1Nd4dw2w=&c=3IvnT o36mrHOGTCa5OXMGFjId06GdzsncYGMHOvsHjFSlEaIBfhXloPqbNJnqaF1ils7DXmiyqaHUueeLo2dqQ7Ze/kRt2y1qlYVqPw6mnwYquQNcpABEhSmmP ZZi/&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.presentfarmcontent.com/c?x=7w55WNt3Axq9fjLZgZ3R5BnneTtJjqltycrrkml48yM=&c=1g/3vEtNPFdhOR2pew490uNfsJ0tMav8czf7nf2IemiIZJY3xxshZadnosTI7UMXqKC1R6QYNCfobeIhW5IqORWJsAfICio1 xymUQV2WfwJApAZ/bY4h6e2m8lQaMdz&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.newcapitalcentral.com/c?x=755e29O57brCF2TlIMlRCtQG3hSIGmhNGxZB /kFgqo=&c=WQaF1fxIe3B5uMvqmFmVioL6Cl30jYVobk1JpbzKQ2 4kdIAwnlnGO2D7oUHsSEHFNurW8 e7LFdPaO858MwqNAiv46vGIZrqmI/gFonZJG9a3cMz4k9iqvfEs809Tkk&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.cleantourapplications.com/c?x=NwCFy8L8CQQ8xMI CRbzWEZW5GDYy1zOKQABbFqsjCA=&c=3/1Ra KwlGTY/YYYHlCO1aGOopFHYkr95HLhER4NhyUJisKke/xEPbsxp22eakDAfqJHmHyatppeqgN35ZybtOR1vSkiEGngkVDc6cVMNtl1APhrvTtZwDzzd6oGqRqy&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.newcapitalcentral.com/c?x=/LI2I2cY69RKDHDbUE1MoPPHAUnRJxqBou031q8nYCo=&c=eyZ0rcWTRATobooTNC9h5imBPUft8bTPQ6/2jDY1pyaBpyZhTxCRh0Hv7pTY X0V6w5GYtl/A1KmWL2BjmY4YihgTwhJEd8XyvKQbCaMl/Ow6/Frux3aOnIfX0t3VxSC&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.towerscontenttower.com/c?x=p vU0oh42RIDiHmIIdyGL4GCdDLz7vXeZgniLqpvgsU=&c=bw0JcOmklKI0/JBEacQp36WnXhlxX6vD/rm p9/Cde/Ykwv8KsYbwcEkMXrc942cNJ241YU8ekGQncvdUVNJ4ibRtgM6zjldyGjbKtnkUbSPkc7EOeNczf/DsP9XTjMN&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.newtoursfiles.com/c?x=Yv8Q8mZck6dUPc1Pv F1i7o94Xp/SadquyVNInijAAU=&c=DhPAtTG6uBOBKNxz jAaTy5WyNCcL2fSf6HywSqVm6xKxcpbl5jQOJ SeXOkbdKS88vI/ijmDzcx8iBCoyKW9xOZhzwP2Z3WzfdJ9HLkZY ebwq/gSL7ATBrpwiuMfQh&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.presenttodaysafe.com/c?x=Wo5sWjPGvHPq7RWHvZ6SqoApZI7A4SyYjeHPjHGjTZk=&c=PBb/4oGXYJpp1bZ9tV74yyZ5IWgPSJGpdpeUQU1xzVl3BnBO9O5Fa50tfa1UMOA8gT8BBXRlFRUONfF/tLaHQoWVBCslV6K36G7fyae0tnkTMWfxsF05kN7z8Q6 AivK&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.conceptssigntour.com/c?x=z/scSosGxLPLWM/5WQabW0RmVOrffAg45yTuSkRibQM=&c=RsMEmxgmcjp0JeJ7PI7qmqhZDEbaLrf7RCV0painCBKOQAD7Idayd6V9vkFBYAmdzcHLbTNQMw5hkpUdliECPGDlXYIusCZMp5EqWfqcNNiVBcZDklhbuLXYXFNoZGwp&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.grabfarmtown.com/c?x=NvYGFRrcuSFiK0gA9IhQQCtwOxTd100 CojV0zcMP9E=&c=vtltZHF/9jcm1e32QWYsEz1lNBqb/OCw4J68Xmgx9j0reBVlNte/210vBXscWFCyNSdD0iEQk/B2BC82swZUIQ/ze1ONrepKuoRZ08XrAH1Wdua56mA0KSmG6m1XUj12&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.bulktownapplication.com/c?x=SlQflidY1oWjnVyegIiFaeKtemeWbRztphtbmLGZfaA=&c=kPb3oPhowdARTcPn7CtsH2D1uSHkz sJdtvYibXq/twslYa885m3wwaFZp5Y/mmoj6Uk TL1wgl5vN43m8OosYld8jjTN0iLYdQsEB/vwjBOQ7WU8MO/hrTJHm0PeFX8&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.capitalpackagecentral.com/c?x=8khaEeqwWus7Hq/wfbNVuQfqkr/CINNcenoekd8ejnA=&c=nlwn/xcobb0xZQmqdR3Qvhi12CfJPjWPmspq mM3QKEsTLFu4AFcg7Jk 3SJioInhis/OiuB17pMdJtU3abKje4VE4KSwvv1 7EcI57fE1XI36mqHZ3XFnEIb35E74ew&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.capitalpackagecentral.com/c?x=OvslCPWq8HeNwrKaFxPVlahwNpo1HbVNpLY2PBHXM/Q=&c=ZchBlEAQXlf5WHZmBBcms76vbkMs5QsuSbhtTKp6xUWp7u7ajs7CD6Tyy7fBOrngO/hS1M74ph2EiqCNVS/qbOaxq9exMmJNU2fcrN19io7whxwCKQoZTzOzqiae2nut&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.nowcenterbest.com/c?x=e23Ki2GoFkP0anoFk1eH94owYExMCZL8dyUvYQMz5to=&c=qJLeRo5YefkjDVFWkoXgi37rtNbeyyaEUg0mZad/Ux7HCgslZjNLyFNpgP6lIAm6KDFbx/HLpuD3aI3qmz45PocpNTIap8Ssx5pOB5Qd0tVfdwYywvrD3A4WSL9zC7oW&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.contentappsbundle.com/c?x= L3lSa1n6ovFIFBiL8D4NL7bkEbe4ReK8cHialMZkKY=&c=3Nz2AgcZQiafbyrAalZPcwKc3P px1EYQ280xppfbOGweXfP5AZcfAHvw7IsHGqoHdoSkDJc4qMmskotxx6kR5pz4KL7s86/zUBUP2GVj6973J0bt2CW35qRQMxvrKhJ&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.presentfarmcontent.com/c?x=rrnt/eOuc7iL7d3oCXWr9K0JC1lPRJyYoOEeRWhYRW0=&c=nMnI5IaUTysqNA7M1Q4rjU bVMRR7KOBVtjB/q0p8Thv88zb5hvwMpu8qyI2FDFH GVcOgmavZZaTYfKPV5CMhi5uhP5Sesjdm43xiAs/4ph05cnbXaKTjFGFEMYotwu&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.tourapplicationbundle.com/c?x=YwvhDpFMVX6jepraypK75c0iSOn9tDtuzvtOBeI2wi0=&c=FdUgVZLb4Wb2vkEwseDx/hVUR6fH52M1DOWki9iOlk0znmFigwCiqhM1EjwpUhmJw8gHcUFm6opqAbUsm2OVDyZ67yisWE5Gg6DexZSNP4d3IOetq8BfbXftC4X5UHcw&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.bytetagranch.com/c?x=SnWRlURpINHYnCeIr/xJ1e5eKllk8qhGMOWjpsr4ms0=&c=ARiXDaKeSAwC0PvCq9g7Cjt6hi0pIRhQDRClXEpR0HZ aJfrTJobyVRGtRFazjbrIneqBAyHjLvehKbGFHt3ciOfMbijJCRxxqLQ/mB/Wk/Nx9SOixw99Lb3bPQprrns&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.grabfarmtown.com/c?x=uoKSI4rLQSjsRBke9xxdZfu9BTeQlVCzG50i75P5iHQ=&c=H50fehlbbcUs0aSL43EYS QNEHMXH9IEUKoaPTHh2UfUZMge /zbesMJGi8RxpsfVCMC9bezKj6Sg6A1BFlE4UxAVcKS4f2sWWB82Z9jBK5jwslKTh4PUy48GjcYqaSq&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.hostapplicationcenter.com/c?x=eaeZuI8FTymRNHAKS7125SVd6 wgTzVI1gSOYiclJOw=&c=OmvDMw/yDED9 bycHIWHs9cBFHzaV5RiXPHO0Jfap2W426zV2F51SFYNACWiu7/FUfJBCmGvKMPCumuxfnqdt94eBKg7WhUGgdFra3BrKrCkehg5Ua0VjP7S2Dol8ZmM&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.grabfarmtown.com/c?x=noOWr/bZrs 7V40xKsD6s1Ygaf4BIaWla7F4ipHPJW8=&c=WaAuAwTZdXar22Dro4nsPUEtRuVAsXS4n52JxedJWTi6PvdeuRcVGMujlEuJ7martXjmMxInRJWM8aJPc9 Anyqb 16xdl336goAzzu SY/5viltm7x5yVpT2Wd9oKM8&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.grabfarmtown.com/c?x=KIyXxi1LQKnANGoKiIzqtWOpkJv8/9wizXnKvanByfQ=&c=G2HCtQrHHyOsUWYCoadcZvhpcRGXR4RVpzUkpNS8Bx/1FJNmjK7Hgrb8G UjnT97Z2HP3FICUjc9/7BHXAuOYGWKo4mOHD6UmCiMXI9r0 nTxTI6ZpRnUzl50pLmXfz/&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.grabfarmtown.com/c?x=LKu 4DTVSF9bsSpB5HHkFrhqKSyydVxkCLy9pt9xKXM=&c=XgVZzkMS wCVYRFf3l1Daz/jLrTVY2YEVjp3t2I7xgnSUIdpj1NihjOFtI5CPUmzxwXD ywnyIYFNKXW1Ar2OborUz9mDf0u0L3AyyKRKP2fNOlUxV6sXs/BQb/b8KHI&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.grabfarmtown.com/c?x=pbafrz6NhfuPIUaRv90wn/4iZlLkgPp8WI9XUkqdlz8=&c=38pzKtIdaKeuOxWKnuIxjuc6g8bbQnjB93RRjxR5r3RNt3c6PhM2n2uOPf1Z7wbEUjZXCdqTWc2OGw3r/IFqEDpVNrV91SeeTVh3QouvbsixX7Alyhpnzt/ntx40XdeW&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

http://www.grabfarmtown.com/c?x=vQ9p/EpOe7 1D4JvSoL/MzuPr6bG2dUZsHgzTOGmC/I=&c=RDAlRc/TZVmf6Q7E2U8ryGaXZN6Q8VdAYt/d6VXpYas khbbLnbMhU5XEcTc8SWcw35ETuA60BOo0F 2U7vPex8DlBznWia3U6p0TZBYY03QGt6Ld7iSeu6A6xBL/yMi&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe

Latest 30 of 40 download URLs

Remove chromesetup_fr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.