home

google chrome setup.exe

Baludamane

Max Criteria (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application google chrome setup.exe, “Baludamane Setup ” by Max Criteria (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as Google's Chrome web browser but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Max Criteria (Fried Cookie Ltd.)  (signed and verified)

Product:
Baludamane

Description:
Baludamane Setup

MD5:
90a114e5ddc8fa6fc3a00e2cb92d7bb9

SHA-1:
cafdd7e95db99e2f93ecb2231cd1210047186135

SHA-256:
b70b858ac328a6943f6a2929f8749be42e767058f82d5bde3622cc3e7b5f2b69

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/27/2024 4:36:22 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.3.17.9

File size:
1016.5 KB (1,040,904 bytes)

Product version:
3.8.1

Copyright:
Internet Lite

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\google chrome setup.exe

Digital Signature
Signed by:
Max Criteria (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 7:00:28 PM

Valid to:
7/24/2016 9:07:50 PM

Subject:
CN=Max Criteria (Fried Cookie Ltd.), O=Max Criteria (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121F0C6B8EDBABE266B325280BC664A1402

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:1tUN881agIRk6fvFEdxg9XUudWz9vzOVrj7OKzA:1tg84ag63SdxoEP9vzOVzO2

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9115

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file google chrome setup.exe has been seen being distributed by the following 20 URLs.

http://www.vaultstowersmega.com/c?x=YzMDl8NelZrjT90Rbln54umBTDEEN1Y2sAcIP0jAbCI=&c=vzTkQh/1 SGZSaCTeN Pv9fu7zXTa3Dhx9MrnvHW1iWH/LlBNbEvocEZwM1svjfL3oPeiNm1cYROSb758An3KUGoD9PYAcavrV5VOu2d3CmiCspKNc1Pw1 sdFdGefhh&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.towerbundlesmeta.com/c?x=HO6ncc1NmRjNJp/S34HyQQAM1Ie7LzwvaG j4HvFh9s=&c=21Ze 0D UYWU0spmWe79BlRmCVQ0w8iKuuzTDiFBkWthfKKfsIV7wuSZ0tTwly6vIzUA5GT8Dh4M5ACP0E2sFMEkbLQ CRCPwEWrK/gvpQeB9XZTaSVm1XjmBaWq2wUS&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.packagequicksafe.com/c?x=2tysdL/5cS6tKbuYiO0VSQaCmksw9QYCgKnmy/uF4L8=&c=wa9drCK4VYdvRGHbtDzU3DMP2msG/8zK33AiIwbym1GLcbEshdrqkJI6S6FTW5fCxOyXSJxZbNmG9/joZkPS7mQVGeXt31LqyjU2Q/tEZP5PvVH0d4h2pLNGDOZ XgKN&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.currentbinariestoday.com/c?x=LjAd bxS8DBG3XlXFsx2/fa8i2mCsqGUgXjiWiVPmXY=&c=xw2flg6ZpizSbnjRXsfE/D63p8kG NgwgXiTU7a5ifi4Q2oChW/bCHEwOY0aZ8B/kZnn0Klwu fyIJzS/9OTQF24wVGAAt2m/94Yf3TVxV4OBlx/Yy6TgWzjV4zrKoPU&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.vaultstowersmega.com/c?x=YrprzUbrsBDvF5l4cLht7TlRBM/jVnZtA0/LNLD Rq0=&c=8UE9VjWX4CM65njY9VEJn5ktGMGqJSMR5GknQnGCThgxpq0fpmKiVPFBlOp8rMHClDxTZTBE7EFAU9bmF6G1dXKtFr2JCq62WMylEFuJiFwz6sZAUp7ajz3G/wfqY1uL&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.packagequicksafe.com/c?x=PQ4XSBBJs9nkiyq2M1Fw7KXT5ocNh4EZJp5BD7xcV5A=&c=JsrK19QAPoZlU2mSIFSiD8SIF3pFsg9Oa1prGwjn7B0AtE55Va51Lyn62 zgq OlHvKMQ6oVGmc3Q0PED3kWtY2Q2p5E1Gk2ZNFtnVNzOkuypN2Bed1E1eiHK8Jsi1QR&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.currentbinariestoday.com/c?x=agT/wW3uvxe3kVR3ommyXqmv9VqHmzVBVuta1wtslfY=&c=2S7Y8DU3ZpunaXzgDc Y63985qAKMnVKZMBl72or3QRLjQ9TmfU/YfhqbM6N Cuk0bcGh4GEU pwyTrEA4jB9sN2xkHTtbFhsHy1Lm1erD5TixbZoGMSOs zAgOi1p7L&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.packagequicksafe.com/c?x=2xTQU M91p JZ4gjJaX3M7Po3y ILoGSZjDJ6RFfKVU=&c=uFybCALSsgrlqU4nyJjM 7TAlbjrW X4AO8GAiFKzzr/HKoyqYriQAfvHWpDLEbNYpht9H 4DlDS0dQD91v8/SVvk5fflqw37hV3FQd/0zSEWCZPgTn y fCyQBq3mPb&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.vaultstowersmega.com/c?x=nqRgsIzqfBnVuaZBMxZ1sE8y941bE8/cJolazlLnUcI=&c=oo5XfMT3lEa YeBP6u8n VSqrT4sucyvwgPFTdQa40geWf1vJLii 4Qc6Vx3GFZYcOmrnTL8c5rr4oUSaHUV2IFbXVzhLXg7f8sstf58Nkn9AhYlDt2dxwHb6VR4sRDC&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.packagequicksafe.com/c?x=ZbqbQqQ1EnMzghaAa/rsSulZjvcp6aQb5ErLxJauSPQ=&c=JViBIr0zdaN4GIkv4Ti9gt3x J/ClwsRGfkVDNSr kuO9BlrmyFqFzC1TbUNqLyi2 IfJCZr42Yu7kRYSRsID/0aCQyt6R6SNEKsJjgNrlRL6V6 Ixa3mZYi78S9TVx7&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.towerbundlesmeta.com/c?x=FGQsMLvdEOMNQEXwlkNvkxHg6iAiMIQ3ovpdX4yBbuE=&c=WPoByJK9M04z4LijjyzlG8a0IWPcud1lJW6HKbFzAXLRJiiZ8UXhtJsN4yooQRxLw6LbTSAvut3qBPJC/sA6zurqKCya7ldtq0MSdWdgPWks6hAo56yCiAWUksOZfWc9&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.vaultstowersmega.com/c?x=ufJoOg0E1ZxWtTlfVzC7wP2jqhyn2m89l 02z/LZMvA=&c=38yrwUKJc2bs4BgaF76vVtgdZKolrmVjWs6lX3FflkdTtljQwblQx2Z7x3mtVtZKeV4e68fAvtXLu0x7q0NQnONxC5Hq2m0Z5JYofdfe4ki0qI9XVZp763i2DDxuehcw&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.vaultstowersmega.com/c?x=Ko1s0nJCxGL7qKRN6kAiL4OveC0D1Bra127C0rPbM38=&c=WmLZB4AZz4RjFjBfzMvGLhtn0PpZXsPMsfLEyq03QVkHDoRcjLhRiY6VbB52cYiZQy7cNYzYDP1hUHP4MlloAQ1x9MLSDp9VDxUqERgM44YCtQ pJ5viXrQ0jI7fRsJj&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.packagequicksafe.com/c?x=etF2y/2AIrbQVb8SmVnQ2vrgVj1wMVc7MtQIHrWBNdQ=&c=pRtmPUIqESdwhYls9X dV4UJeeo tz6F80cnaIms3T8GeFEL97BTyRkBZ06nyLEHYKH00LaLRBU6WqVrB1o4ToZPvtWFS2bWr0C7jFp8sJg79T6A7L38Htfmu59cFIn &downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.towerbundlesmeta.com/c?x=oBm7y9T9XEZyqUGPPnkzgYHG9QQcYu4Qj 78DK3H1Ck=&c=nncG2MCLCqkWfG/gzmD5IHbEyCxNixhwVx n2n tCvcbx /peXHHIexoLt XlgoLBuaN6Z2AyXUDzpYIKtI79yMMtJqJTzoZz4coE8ywB035Z0zWei1TJiIlI8bKn8Jk&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.packagequicksafe.com/c?x=fr/PaWJFNQkmRl2wUfwZ gp9CdHI81CVPFNjV/MINro=&c=/s6IGruF4RR2ugBhnSEDoQgNzB1X6I8RHVfzdadsizd1pPL253/enftCtZWw0ZaJRP03P/de85i0N6GVd7LxXSbhxgwM4G39J54rtVUkC2Aqj39JNgXxpf8tOgIaMYMp&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.vaultstowersmega.com/c?x=fzfuNVZl9CskdUbvq9SUbutd8TiQYD6sQ2LtrYH0H70=&c=osp1Mr3J WizfCHH0SP/SIcqOBck9uKrARzSJvyCGDeTffKSP6wDNXQ hdcIXTnSKFyxHWy9rm/nnp7E BoVnQDkTpSH p6Hgig9r77FCPUKs8QZCoJBB46alp0feWvd&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.towerbundlesmeta.com/c?x=cMh52UKmMJIHk8YtPoyTrJQihetogN/rs3jeyESqkJU=&c=/As Tn0jVFe10DVRQ4XIa5al/J8eLjUmu4vlN8SyOVIcm9u 3OnPlxyk4Cn4Xebdx6bi6 8J0EBoI XQ lRBiiSul8JJSrK/F0HOx/p9A8CWV0UogaGwP5JsxpF8NTqO&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.currentbinariestoday.com/c?x=KnReljd4ramDJ4aFXXrYv8IbCi6npBP9fvIfqFLP5Ns=&c=S1CP0i6qy5yKeOKxj DXfqWaRXMKULmSC60naQwYKE A5UemE6ZPrbbcvh/ H0ns5AQmmWd7fziaQHB3QseEBTpENqXIjFIr PC5KzUysn OZezGnANiO7iedwAqNLei&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.bestconceptssoftware.com/c?x=MnrU6RZTiWGmkSAUtUy9Nm1/XaTNQSiQtFGsEoQcXzI=&c=DpTtZ2WhkKygqdIuKoHzAHP3J40kHyYLSAkiNMPh1jVt/BdNdF97lknDXatyA0TvtJI6mdGDFdGl1X7Rd4OJYKXKRcM5KGboWQMtQ9W5g1I6iSBkDYh6SVtq54dQN5Oh&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

Remove google chrome setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.