home

google chrome installer.exe

Internet

Silver Setup (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application google chrome installer.exe, “Internet Setup ” by Silver Setup (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as Google's Chrome web browser but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Silver Setup (Fried Cookie Ltd.)  (signed and verified)

Product:
Internet

Description:
Internet Setup

Version:
1.2.3.8

MD5:
30942b281b5414c29a3b5ae75a8a3835

SHA-1:
1b62e7f7e64a6257d9214a22d00f696cc0e8e008

SHA-256:
feb964d08ee9fda1ee4e2bb0c40fa3fd8eee2ce9d5c4765e05873ebd878352d7

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/28/2024 2:58:59 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.15.18

File size:
963.4 KB (986,472 bytes)

Product version:
3.3

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\google chrome installer.exe

Digital Signature
Signed by:
Silver Setup (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:13:58 PM

Valid to:
7/24/2016 4:33:54 PM

Subject:
CN=Silver Setup (Fried Cookie Ltd.), O=Silver Setup (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112140334915ED026A82D6160FD4F0BAD4D4

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:NevQdNB1+F3tA5IWFJVxYRDRGkvUM0R/JZNs3:NRPB1+dtAJYRDRrvBC/JZw

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file google chrome installer.exe has been seen being distributed by the following 10 URLs.

http://www.signsquickbits.com/c?x=BcURajJDsKL8gXa0YKKys4t70neGKPrIaHRJEeMHDfQ=&c=tgCLGlyi63iu QV1m4QxGMYnyB4xkbSjJpkcYp2dskZqx8QNwyexNHlOK8iPfnJ2XKolplWIO KFPdHOzCg8Xzr4vp22FTILD/toNVzN7jZgg5IsPI9 rHNHQJqJBIUO&downloadAs=Google Chrome Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.applicationschuckledownload.com/c?x=331O2 WI55TSsMIKgc2nXNrBzFrfSEhcs16BfITeLYQ=&c=O8sMw4VylDx7pOO9qDhhnsuKflXfH0g9cvoSM164DrVL7Db6XRHaSemc LOzaXmOVq qnLpMDTcvjoOB0PKrGjgmo6Q4lJVokqvCebr/6MzK8E1gvqPHJ7OvwGbJelDi&downloadAs=Google Chrome Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.appsgiftgrab.com/c?x=VFZnk8qiDPSTBnbX/fytxIsXAQNKD7NRs6Nlk9ySaWM=&c=/xLDwlXh2D/hsO9sBNDSfgblLDh6GcLNz qywS5mYhUWKoC2W378h6yblnE9Zz2RuNk/1tyZ8b6Xnt8PQQbuAt/2dR1ODPGV7JNurlA2j564a RUsAgpOi3CeFVwqYUx&downloadAs=Google Chrome Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.signsquickbits.com/c?x=EJOsMxC T4ANJWFcrwLnPr7I75rz0Lj iThYZ016/ o=&c=g58Xss9gRaaZ3VEUOx9a0WuSUCG8P1AF9cTopumo6yP7oEbPVw/6pyBANVL6F8gbbzEyBk5q3MOCDf9A6AoF5m7Py98C8ndxuHS55S0jGGTKlukUDngyVsqcazq3OK &downloadAs=Google Chrome Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.applicationschuckledownload.com/c?x=ZKxfgnDMzJw2vPsj/XERU LzCVMNV1WmYoHuMiW8s5U=&c=sbkoiYWDD39f6ClrU4HqgCVDxvcjgXlnYp7tZ9DI3jGSzLDNo/pNOXGgYmfCrl658g/kfXB6Zy5Ifefv9XO2ocgstlTsfZd/LSfrsVNpNG2HH y0eD7JIYJAmGIbdk5W&downloadAs=Google Chrome Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.applicationschuckledownload.com/c?x=2hu0ni0XdW1nhBpssG1BLltMEln47qHbMLes4ElCxVU=&c=UMOpayYGWB0/StL4irmgX8k51oFBW6wunhfSY7FzWom10V6Vrlm/LlP5Q47sQ0RN/Ru YPJ5Y8SqejlYECcgS1hkLh/GsHlv8/e8 5YcytrxBfzkn114O FdXBG9yjVQ&downloadAs=Google Chrome Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.applicationschuckledownload.com/c?x=CRzkvdm/fJjRz/gipZgvSnpb/rmMCrWN9HoptWMrUzU=&c=CCg0SotWW8KjsQAWKGDciRuDLUpXSsIUJKC65 dFLM9G94kJou1phxPCHFM7/ezZ QuaWOJn4mmObtJglfgNsbMyyf/yML8zxF8/3oVfYoAXbqhB 7InNxOmL5T5TWE4&downloadAs=Google Chrome Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.bundlesbytetown.com/c?x=MkpZfIi2lB5As PJ3zHZfn9ufozSHcGAgqNCYc1QAzM=&c=okoMYz6UWdLOlcFhdzmHuUMF0wv9DWY1zOowVm6mB/K/HZFF4TUwUDZtzrwWmvQIaq Zao8NNliuHdoMHPusikCwVeQaSJl1/G/CWLWc0gYl1PX 3tgEdk8SN16xrQ72&downloadAs=Google Chrome Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.signsquickbits.com/c?x=/q/xezjGZma6gAxwex2Wr4dVl4HY9uyoWoNxgk4QYW4=&c=8Ss uweKwiwLEGwtI5FKrvN04jDbZP70vay1sa6eYIaIJ7vWwzQQ2TDT8mwhXL6h l0hKgWdjfnmCsdeYexFga33m6HR/703d49XAYiwVF/0JmvPk p2X3gjIOXE8XIj&downloadAs=Google Chrome Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.applicationschuckledownload.com/c?x=rJsDBAYvs g3BGHaLgpd19AvvG0yBBI2dihJz0 n Q0=&c=U5bGWZIPBYnQZHqP5Oi3rz2oEnQwUr6zLUmP0iASyLTnPRXjdjnHAkPs7eylV/58hyeknld0d1Zah7ASC/XLLG12nnF6rbSGuHZTRW8zUGs2 01 hQlSmelWFnVdJQxp&downloadAs=Google Chrome Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

Remove google chrome installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.