home

google chrome setup.exe

Bage

Darwen Marketing Inc.

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application google chrome setup.exe, “Bage Setup ” by Darwen Marketing has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The installer is marketed through download protals and search ads as Google's Chrome web browser but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Darwen Marketing Inc.  (signed and verified)

Product:
Bage

Description:
Bage Setup

Version:
5.5.4.3

MD5:
72549609cde7b1c553d956ed677f99af

SHA-1:
5e5fe7184c9c109377b7028979844718402bc2db

SHA-256:
2afcdd3a42c8e806cd60b405eb1423f0be7cdbf183e2fb28911194bed1933964

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/27/2024 8:35:21 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.DarwenMa.Installer (M)
16.3.9.15

File size:
1013.4 KB (1,037,688 bytes)

Product version:
3.8.4

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\google chrome setup.exe

Digital Signature
Signed by:
Darwen Marketing Inc.

Authority:
thawte, Inc.

Valid from:
2/16/2016 5:30:00 AM

Valid to:
5/18/2017 5:29:59 AM

Subject:
CN=Darwen Marketing Inc., OU=IT, O=Darwen Marketing Inc., L=Victoria, S=British Columbia, C=CA

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
1F1F22B813CDB509DAAD9139C753C40F

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:FqkRgzlGUy5dJ6zP5XvMCpBSDbF/X1IhsyPRhIT0miGNGK:FZWZGz5+zxXvVXSDpv0sM8VNG

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9096

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file google chrome setup.exe has been seen being distributed by the following 50 URLs.

http://www.updatefunpresent.com/c?x=yMFMiYTpHVg0luCWm3UZ7SQ4AnGezVD THYGf0UHmds=&c=khyDUhseFUxbmLLl3NebguQ6sEk3anePiXwLwF/ MKjwcWiZL4Bl1CkQpGNKWFHg5p3pxLh6KfRTOcsPTxKZtbG6QTpFUUbuipeKR5dDWzTk3Ds9HdyGwYHs5zRTwl/z&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.towerbundlesmeta.com/c?x=4QrPirT/hn8uLJ9DzhWCuys8A24FratcjvW9yKWAUME=&c=207YNX1C5lyZzZStZA1FlFEUqBYTAdK8 j/fr2E rTfrdTiTEdlKlHjKDl9Aki0L3S3ab0bAHQkw1WIcwsXVAAhVnuuRY8T8jt zfwLZJFxzEHJxA97iIjuHLVLYuM1M&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.cyclecitytown.com/c?x=HM5kfVB f R4o9EnEa22QmMaq6g4sc9XulWI6kfXKQM=&c=09bCEc1wWT39IiXUArlowz0gbvlptGTYak2nF/w7U9S9c ti62foPCOB2EdngWOg4YP1dkUzI 7KZYB2ZiVKoldFU/wVQmR/OnDwyCzY0NxsAUmJLf8ghrVvufEwk44r&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.cyclecitytown.com/c?x=b1DfWtA47qBTr0tQKpM9rwzVKJ40VSOcXZvYXteXqA0=&c=/b0/WgrLvdFu2bUH 1ieHD0S6ane4rsq/NJLXkTQ5H5NN5DnJXMPKwIlDRYHOsBjSyNY/JYDV47r8Ae5ex4zTUYj1LdS0EEbU Tu0kSBNN1D7MQqEUowuM37WugfsFYx&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.todayuniversebits.com/c?x=sDUJuqwAvB8ggMTC 5D5XGQ64V9grtXj3S7gKuqE99A=&c=/kxWw9uemk0tTyBUZZ6SBL1XOXUN/Z9nZOHchKG tvGcCCdOWXVusgt9xSRMa3M zmmtGByYIgLjS2fY/F5Iee5X4Ts0GItggpFjptpgh/Ur6aiBoNKq3VfKWGZtll6m&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.metapresenttours.com/c?x=CV5qtkx2BAjQM9h3SPaMgAwH5eO9UDZg8tv0l5GcTpM=&c=C8XgwwvMimCAigHjKWVMATdbS8e6 /3mPdmR5Ku3fgCA2Wn zII7i8mdTZrfpYJzIqQ43g13z2F68X/gC5 Gc1A8j8mj83szZmsExbE29M9rHTDvrRBgBF/mMSh 99S6&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.updatefunpresent.com/c?x=JTzHlWqq1iIvDi8/AjiUKMd0gGg834MiAAeQ6hFlvEk=&c=aiQ yxdft7AO AIu36t9pKhrnBBeu/5AgbVNHdRxTdpCPUbO36DXb9xq0IMnaendQP51yqvkRYOJAWz/gOPuKStLpo9SGCYoGfFY 5lKUEKj5C6Cn469ufB4nVowpRuK&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.dltourspackage.com/c?x= 3QVX80ZRvhtF0YAq d3TmCfhZFfYKyF7MHaqOoZAtA=&c=84 MilShSWW0KUZ4AtJM77ozyDG lrT3c6wZO3v6YoKr6tndCNKquBhTKiOBolyJLVLgzg9RjR/76KiQ515IJnQ4lOJAk5YDi2E5VofeFpcMjtJHxjoRmDq271ucZ2R1&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.updatefunpresent.com/c?x=IngkX6Oy9JgRN4TlrKOj8I72iuyt4Hm/7tWmM8Z2b/4=&c=jjg2EmIKd4eruivn YE8ZcTYCP2PgK9EHSHJCOd/XGN43fyG5dKF2yNtfMjWYrDa981vQwp/uoqscLe5AsYFIpRQ wVtuMZTKpEu4Zv0jo0L/I9Jn1aZKT6HixfY/vqZ&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.todayuniversebits.com/c?x=IKrW/2DRDxPcRHin54czVfVHgOldfdxcJ7ibll2wgeQ=&c=VpOFSR9TqfcsnPjEWyVcgWo0yMdfqPkni1msDhJPSsQqG0nM4OHlCvif8 TJcI4CT5GNvRrFMzQoI/E10wyxfaveegvwVzNUV/ZcMqG51LHD 1Ik3wwOEN8Q4sIvFIMq&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.dltourspackage.com/c?x=MAjftOhLSmgcWV/kmgjH0eIGvhse92o6QT45H8jOXNU=&c=GRQ5IumQPkQxJ/Hk4fSJE/wf4YSgVgeYkb6fmsVn3y0g6W3cPLbuFEpCHciNEEIBdLKhK8TgrdjorllK2sovXy2yk/V6ODTjAEUvrJ9Lc2cExzqqq7b1xIAFg8zXMQFD&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.updatefunpresent.com/c?x=5/dVkKDLFHX9O2Mm1ggkM8cquthzrzmogzHueD7ySHk=&c=nK gk/dNF9AwIwJ/vszPaHei8LFOmUw7Fw V5IvObDfjp/Z2maT2hB8yCvMF37GCpgeUDJKHFcwHnUOwnOKREAHrBL6/T8RARKZ4SNfWJCULQSD1A1f2tpyp6zMv3qYf&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.quickbinariesvaults.com/c?x=UEHBFPD4QVglMSmHkaXldmpkRb970vRMY82508Uohu8=&c=VbqTY OgqdasCmaznf6TOJvWkxLHc/AiwrHSRBlNbgTaQvmndqsnp0vWL6cCUx1gk5KAD35tHc3lkJwQ0xcaB7B45fA56Y2/g4rRBJq5EJTQNVcSFnAket9SBT8gpLRR&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.quickbinariesvaults.com/c?x=qM37RHeemaZGVEWW15ZDcDBCl9INbtRsuNjUx8ZRgIA=&c=J6gqoiV/YX0tQAP27vm6tMfKW IWDQmfr0w48x PncF0GV4yMXvce5mknIcKpU/Nm8CC/n 1FXI5ZMJzhxHa6G4XAeUfnGEzMCIOD0ZmgNGKvIWmsb/uxq4e7kx9xS V&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.metapresenttours.com/c?x=NLoA9 wTCihLG2sFgHuqn3vcQROFq8ovqNIYbKqZ3/8=&c=RWklojQByZ keAztCePdAi6TmD8I0s7/AEDK/QXg5iokTemGDmM8csTnE/ksoW4TT3PkDnhEvhBn N5lv D 6ucP573nYjZLUJJNT1bzlh7Ij5Szp62F6r 3iezmJtLE&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.todayuniversebits.com/c?x=PbXhoFg0ngjDIWpMwW8X9M97etwXlRj57KmmurEtbxw=&c=xb/vIMC0jliayoNHHJphkA9hX67Pvy0bg2HLDXtYWe6QLndexC WtGr66rpIl28loA8mJJyj1BLlSBS WjLd34xG5hg6aqRclOlthW7URiaS2NbkufYytpOdTR6OzIm4&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.updatefunpresent.com/c?x=LQSmPGD RAau1BoPKlJyN1fvfg6uQE2tWsZtbUvVOyU=&c=y9cOXLMzUs24iZLCx8erriS7Ax0ZUJx9Gg2Mrf9TGt7bathRVgiLsVTRwfs8arCAOF1RbzMW2odMHusqaMsJuENJ67k9G3TSzm0dTKz6q2OErF3ClDNJD7KgfqBpugkQ&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.todayuniversebits.com/c?x=FIdcpdmI/Ksm6AB5DpC/x4i6opagXPVGckoHhKHCTMY=&c=ABMtqLn05HAk6Lcxd4ObDrugocw7TRT FvQt9lw9K25s gF3NHwTbdFs88xuAZpW3R15LyMkaAL48w7PrfnOymoBCtIAu6yEYwzXQlRTv9vzirMsCDkRG5kCpn5TL8Ap&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.towerbundlesmeta.com/c?x=14KOxN3k11m58HnykfbiMCqsLJSTUdHxjdqDKAYrxh4=&c=I0ASWvikTl8CQzsKNz YgPOy5qRPLkhIHLaVl6khVLfnoFT9uW4s6dpN nSCRJnn03Lgo/npkII0boX/YPKKAafaa2G4bpPyw4uautB3fZufFjWLhdzmtTHUtc8jYO9/&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.cyclecitytown.com/c?x=tqGf/tnUt6i9SCJiROuIZzxBGhk2jEM5 Zd5CtkIBbY=&c=6UjB7w/wHGuMYFWRP3O/LCGUyQms3tKk4fc QSI/JgnIk p3UibKQkbzSLiPNuq2yHcpTsAdfmvBoV00j0Id3 3bZB8wUNasqTPXnEzS vGjvk47FLjMqqmTZiqYBceI&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.cyclecitytown.com/c?x=5MvR1ySLd1eq5hNfuHGYig1O/6Kma8bZ9EeejwmwPkk=&c=RuUgpiWPwlnxrN9cleNuAl3HZIXCJIIYMoV1uhUB2KrKXBt/adLB2vgc6kSniFqgOzdMuTqkieE1ASD xIh24EjTPQS3jM72L87HIr1F6l9zP5GECvGT2oMDo4eMv0sP&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.dltourspackage.com/c?x=wpjUvDIXggd/LtZBq7b8z3kcX02 W v6nIogbxWw p8=&c=jMEfZgzgim60tzAnwLUu6bNyjj3ynIrZC0ve1XASwPZYWKshx8NLekj5zzWx7cJ4CszGY/KkcBmrZfcxhirLakgADkX10srr8g099sYkIGU7tLQXsH13rrHnKRjODTrC&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.quickbinariesvaults.com/c?x=52e0uFqbEVjXflEAdh0WVavU2PETbWZ6LN414T7zjII=&c=8g3dUjjqAWa7NcxEsOLnWBLBvgAXTmKeWzDiQ/zdZkAtBXrRP H3EvjemnwvR1R8hQulH2gHhK17GvCP8DDqxpQ90BKlix7Ces5Wqyta9ge04iacaJMAEAEjZyziesLZ&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.todayuniversebits.com/c?x=pW0CpS9klsgZ0cRYbW40gJaUVE BMq8p3d0LExEPGPE=&c=SJ2OmCYFJsQtjdssNTV5MN6jQ2q/E6YKLE8J2oPQxuurLZJV06aUyTlAtxMvz53J1JzABO4aOdhq7dIDV5q65egXorNItTRYpdhaugfxbNdi4U2ik6kKu hs8jKrDRKC&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.dltourspackage.com/c?x=QqB/cGssBV06Aqel5Zso9aHpDTCOk I6wzU4LEJKwDQ=&c=K6zUw1bexSb0Cf3fhRSGpKcsT1QGdAsqEGV2NrPj6c95rncBRzFSta1mT/xwd6n7l1tRpNlxBjKAnk8tFY43mQyEekBttBqToVPUyP29dWIKWekO6/9xhOkwbJ/tTSIc&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.todayuniversebits.com/c?x=NnqfmugNjqHjbMnHiD40YQ PX2QKBS1nCTSDztkdEls=&c=RXmSqjkfhjw8SI YBpMbIaCKQgcYf0ZR1P3JqEzjPT2 hvm1eG0n9Ls51mZAwwXi3KBFvQ1aAmzg76wksUFJFu9gFgZsRor7 XSRsheytDhJHEGB1Jcq4uqztYPdkFiF&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.metapresenttours.com/c?x=Lm6QethpmsyYS7sSvrgQwiINl 9m HZZr8ivdsrFJRI=&c=ofZFnBAsD VJXDDCXqLHnAS2jXCkyDSyqeFmxUjWvsAN4DLi UE/xCpmdlNjvJ9PqSse9bwCYKujCgElkyMs8rye0o9F94 Ki4aKNXfNpObFTq2tuNvlvFN48cWojcZu&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.dltourspackage.com/c?x=RueN1eOtiSOkhAFbp6JtO5sFrXgwldtzltCpgdfWR9E=&c=crzf0UNwhdhsHFd6N13q3J0Xg5 a9B6uzmYkNIHwSr0alRykoHcULDTS/wzhmBC ls3PH2SClQgovCbjlfhWUzxiPOU4htgIWUo4wfuwF5KkJvuyhx40X LHPc9H7Rgr&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.quickbinariesvaults.com/c?x=f1VT9T26K PUUzHY4XI9npR2z79/IJjsU5uVtwEBwMY=&c=SBUIJXJ0mHlpLxQo5B1LofWKiuFs1AkR7hDFJTeiYZTOk6t7SdoVldA7E8LKIRqtbC/gHcOcpfDTeqvhM9peNnZvLmhCKRs FH/JBtH2U27xW1vT9J 428GNO kTJC/s&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.todayuniversebits.com/c?x=G9qSj/ImUitr28ulAcISctdBq06h31q0bbwg2JT2kKI=&c=GdUkTYSeqcuK0 eOcHrtGT4BgVxnVkAPI 82wQMnCEUX9/OfBktgwc qkcNiPkfq4y3RWuWUjvPJWTP8LyP2xq 6LmoqvK6ScXJ1bn/5CjoxNTBt/gsiQ1kEPd6Oq9 n&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

Latest 30 of 94 download URLs

Remove google chrome setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.