home

google chrome setup.exe

DarwenDLM Downloader

Superb Alpha (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application google chrome setup.exe by Superb Alpha (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. With this installer, users are expecting to download Google's Chrome web browser but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Superb Alpha (Fried Cookie Ltd.)  (signed and verified)

Product:
DarwenDLM Downloader

Version:
1.0.5.53112

MD5:
7014568bdd4a3c6f8e00dd33a37098d4

SHA-1:
e71bb5d185ed7378e58abd9b951eb11ef82cee1c

SHA-256:
3e9ceefcf34094cbe40e5a36339c04ccdb82106b359489ac6c442d4207661760

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/2/2024 4:19:35 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.25.4

File size:
1.1 MB (1,176,024 bytes)

Product version:
1.0.5.53112

Original file name:
ClickOnceSetup.exe

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\google chrome setup.exe

Digital Signature
Signed by:
Superb Alpha (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 5:30:57 PM

Valid to:
6/22/2016 8:18:43 PM

Subject:
CN=Superb Alpha (Fried Cookie Ltd.), O=Superb Alpha (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11217F30BAAF40AF8D13BE6DB4153600593E

File PE Metadata
Compilation timestamp:
2/23/2016 4:51:42 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:Y2KFgeCz+fqwhZBYfH7NLRsksYTqFTG+hsazNvFsms9B9:YrmHzDwhZAZLdCTGisazNvFsz9f

Entry address:
0x11742E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.8607

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.1 MB (1,136,128 bytes)

The file google chrome setup.exe has been seen being distributed by the following 13 URLs.

http://www.flashuniverseranch.com/c?x=Zka2LrKCy0Khd9W19rzyH8SUYrL3OYhILFMokg97ejk=&c=4KS1KnUPqtZ z9OsO7V4fZ/hULjW0wfduyoL523p7MNIobkpgE6t4ShLwJlNWCv hUNFGJdCN YdIkM/6NtZkzcC0EmZ8BSjjR4PKniYtMU7kucB7OFvwoSmQ9GZmz/x&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.flashuniverseranch.com/c?x=G 8Kf/9eavAy6evW2MJh2VqBLs8v 2aYUpJukMz1Nbo=&c=GLyN12DY/2cp4d6g4jCGxHOV16jsUxuqJvnChTWF/V7SKRt3KP5QcIkDbGW3ylxRLA6To/EVcICW8 STostS2AAKbHvn7t8Pjrw0LDTy XOFH9yPUV3SIUZjGZl7dNyk&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.flashuniverseranch.com/c?x=qotLLHy1eBGNHk0486ttEnb8I1JWcxXJ7gzxHtd84c8=&c=oHv2IE/52W9RispXZwoKRjoOKR5djxmWcg08A9OeztFWPh6UEaAaqLz3QDrsBCcRKI3GN3RWDWNGSWaX1MBnjlKPy5ItDThD4IHMeNP8zuGfoz0uOAL3VeEElUJH2sVV&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.flashuniverseranch.com/c?x=1jRDkwuIYReQhlytlxNLKWFOMoXeybNblafNkrk rzo=&c=QvtlCNtLT2ASy8c4szIMjl2CCc0tcPY3MWWV4Y1nXbCpxTX1/Yn6dwsnf4eT9V0wNnFoqgnOzTeaPOvsSb0GtyBx1zaAet9Xrgzhr2 sOQoWdZ3eGr40D8vynV QMSCZ&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.flashuniverseranch.com/c?x=hPKYW9bPMRbLkQ3PofmcilDGsMzwOM9CjkOVjVMmODU=&c=lL0lMCu849wxzz3IPn I9cxKu90e6dQomurx2cKela iRwggxtMDj0fet jpiRW/2o12i1GXEDrK M0sr6FE6WGytBGvgfu5MIJP3ASW7VFcyAaO/Q2v kLMXySIiXNH&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.laboratoryuniversegift.com/c?x=14FNFMS0yI91r1aV2jdAtymKawezsTwdS3F492AB8lU=&c=GolLykN7HV/si5goT2KAnxg5p/UTWWb0FmhujsMtNc5OUhbxQxPTTWW1P4eFXQUIyEaiN4j9EtEA/inXcOzLY5lq1u1jaUvK2FmZLq5HY8bawfPTgXYpwRjkmr7WlxjQ&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.flashuniverseranch.com/c?x=alFjuD2 lrQ1661hfk0gyUziDwpgc0WomX5q37Tz1q8=&c=ZGbeYyt4ANgYI8LyOHnPyahHgkQ/nowztZ3hN/zfzAH5ozuhFYR8OCv07ZscxrExKnYmeV4Bw7b xg0yo96YZXXcnCL/oiTVYmfQbvfB8pzOBolwVha1iwzXlPpJ5ga4&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.flashuniverseranch.com/c?x=nR4dP083EjdY05s05tPyNhElZC4emKssfjVcqDbVnus=&c=HQNxXJ3D/qnTAGVt2NrgPiotxEiCXchO 9hvyC9i3wSYl2zvPcrFKqUJJRoRWGzxkgf0Z8oYYQ80IRKf6XwQYknP7iAIsCiJhqgHAJ4h1H2EG0fdLOioNmafFX P4KxW&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.flashuniverseranch.com/c?x=ci33A3GXjU8vSFr6fy5wlVmcrVir9Tnc7WADojaBJ7c=&c=W5v30 DZ55wXqj982V1/8 5iiqmanTibLgSn96bYz6THtthlER 0NPLd/FlRSZ/GCRK5MMxuWp5V2n3wnvtEbxyHfha2dkPFexz96nUZ cvxfs7LNq4Ir6dwhDAAlVZk&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.flashuniverseranch.com/c?x=a4bMFlUpOTWfoYD/qYF/UfjsPtG0/e9COxF1w3CbCrk=&c=rI4UzihoPntl73GYt0BQbGlCRqy47v6nm982rFpwAmUpYRKIIWGdWfUcN2erOn/XoEMV02WXiIzYLKJ4rQHMOwpZnlHCjMS2wr1/UB 9aH6u7xQShdbjWUpcvsq3dUqF&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.flashuniverseranch.com/c?x=4Pr2RLI84wpi72KoNxtqD/qLXfKiQjZfQ4n60hkNXVA=&c=GHYknIjF8icshtKGSmgEva7lQTZjwv6Fx0v2U2/YAHMOlP7vtGfG9SC23jt7Qig4k05Ceuhsy0vU3ujbijCozE2mYV1iRz1CNPMFm2/ooIdu1zf67Zr2piDkv/dTY3NT&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.flashuniverseranch.com/c?x=QgmTWPsdR9PDZqPP5pQ 1CeQI2qj8ZyS N/ppArSOM=&c=ZVkH7YUp4Eqhssp3OE8/8Xn4o2cvenRTNXeXijsKezbjobglOkSfJja0MntPAPqr6XQfnuyZv0A I9lRIlW0MAWTBUCP4q560QZDAvE abbEjiAE/sQ2YMNfeq9/pH g&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.flashuniverseranch.com/c?x=tZQYbx8KdfNAnPZ01/dHQO9NxeCgLrAgF61RUMhBu90=&c=Y4XzG2Pc9Av81RRLxf87lEgEpMfixihW2u3UUhH2AqdxFb3R0FLAt1lTQy1MtZ4VHFnfUBvfCSBDD1wM1sGRQ/h3QTviZswYxaIdKig2kfjY1zq6FnwaogyoBCue82YH&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

Remove google chrome setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.