home

google chrome setup.exe

Beni

Darwen Marketing Inc.

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application google chrome setup.exe, “Beni Setup ” by Darwen Marketing has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. With this installer, users are expecting to download Google's Chrome web browser but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Darwen Marketing Inc.  (signed and verified)

Product:
Beni

Description:
Beni Setup

MD5:
885ed61bc9a23c2da473453fa6f3a86b

SHA-1:
f924307e18e61d5d7202260480d9f7025a9b4a3d

SHA-256:
cfb0177ead9f76ec018dec02b84a64ce78981bd136895ed23939304abff1c8d9

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/27/2024 4:45:23 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.DarwenMa.Installer (M)
16.3.25.9

File size:
1007.6 KB (1,031,760 bytes)

Product version:
3.3.0

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\google chrome setup.exe

Digital Signature
Signed by:
Darwen Marketing Inc.

Authority:
thawte, Inc.

Valid from:
2/15/2016 4:00:00 PM

Valid to:
5/17/2017 4:59:59 PM

Subject:
CN=Darwen Marketing Inc., OU=IT, O=Darwen Marketing Inc., L=Victoria, S=British Columbia, C=CA

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
1F1F22B813CDB509DAAD9139C753C40F

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:vmC2dUuHKAsjmBXsvrPXxj9ddUrxnkrmeqz9+OYIws:vf3qSXxj9d2tkrVYtYh

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9110

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file google chrome setup.exe has been seen being distributed by the following 42 URLs.

http://www.heartcontentvault.com/c?x=ZVut4vYoKfKAGQ0KWgnpil 9zs5xO/KVf/kqCxMSXwo=&c= s3rHIxOtfITdC0GETxAhoq6pR6P8BCbY4h3LyQanSoOchsQ/nqIyQjkETF8xiRJ2Hx hT2amLYI71gEHS DDlj7VUDBXbXeJLFuhSUvbPLwbW8Wt8IvMGT/sQzeDtrm&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.downloadsbundlebyte.com/c?x=7fUKvl3AlIXiHK4 T91FngCbuHuSHPv9qTD5JNKeO78=&c=Za9h OUXzbqK6erLusnau/VXRuTgDyIojAFLAZJySzSZUHEZhCxLPvKhVDy3w5rczJ7GXpAgi44Qjn8Ek6mBnmO/e5CmkotQpLt2DVK1 QtY3S GdZVWLi8GWiAb42FR&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.downloadsbundlebyte.com/c?x=XcNGcTjlF qgOjK4ge3WCLhXu2Jj9v8t8dOxdoiPaZ4=&c=vnPSnVen/0q2HFz65CmrgfjrBkBFeRay6rxuBNj/1zV/CADVL3dMiIL84q5Jbr3qnPZageRCstbPhobCmPsBn7yqDR9XFjCxD9a1xifZFOgSAnZHCVuGPHEqiNrM1F9E&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.heartcontentvault.com/c?x=s2EcJOuyMTmXKpts/JXEst4w8/Ep5BOws8ynasMIE1E=&c=BcH HQZbGnVvRtj87MDZSDhI DgnE/Q4puGs6UBCUDGuV2/AYA4KxVosqfn9 NPWilF9jvQwMBaKft7pkH5NX0mJKEdfeHUluuCqN7Ga19SRj8cO7l75NnigZxlIhnch&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.downloadsbundlebyte.com/c?x=zrtBLIpNiveX4Y7rs2/008rLwlUyo1vyTjfy2/4qAcs=&c=Zz8gDaN OLG3naPt6bPdPPh dE scT6IbW9g xANYAykihpeXRlv PkMijjTtolfgaUJjFnKS8RPXKUPfqAJiNLMiJcxxQ5TXMmuHEQdbryZVoXRMlSP /gg8nYst/0&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.downloadsbundlebyte.com/c?x=T/E7jVj2aNDol0e5yRakleVRwvcl3YfSR9Tk6Sl3sLE=&c=UNG7IMbcVB6oVfBYG G0J/3rTeaetSBzFSsn0hWMvFufYabhj95Q3tOBZuFqfW2SuWFTLuhDpc9794DPsj1O3tC /nxJRuCBHtSNReyelTV9llaXTRbclaxceIUhgZ5F&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.downloadsbundlebyte.com/c?x=rQxoniCo/23P08PwlUVrSQgHsdryrHm9gq5OAV8WRUI=&c=BZYR/87mdkKDn5pqjbtpeTiQlA4OpyfeIhM5j VmuOp98pBvvYxZ40CyHcvn03OB8Cs2eapWVkCfLEZaWFkjWy8ekHyOQlx2CrgLS32D2KKbSL0uLytXlFByR4xViQGl&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.flashlaboratoryapp.com/c?x=qXxywmj4stCdNdI8WoM5MrV1irNn78EgIBjcHCLbeq0=&c=OAsc49ZtNG3HiWA22st62Ive91fOseDsrKa53nbj8HPksyrO7qUc6MbVsIiQxq0hGh9yqjeDPPjIX5FjvwW0U2BPEPKS2tjxLEuanRlgjI9F7pPaRqnt49WdZtjC74R0&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.flashlaboratoryapp.com/c?x=DP3Ew/xCX9IblvXtmUUOZJ4KK/sJAHkzYzXtmDbBM7w=&c= QuljbUZUaS/Y9PdbzRSYLRKrboQcel9smuq/NhS/m8z2Rj09Nf6tp59Tvi3OtQGpMr81Q32MVcEAvyS15k4xOSoo1pZ 1X2zmZNXWA7ooPPrdsuhm deR32UeOvmsTV&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.downloadsbundlebyte.com/c?x=QSAnxH cLzZljDJJm7LFdYCB0KqFOd1A/I9eyRyEU/c=&c=PgKwxfZXnA2GtydVjUQ8ZC0fZIDSsiB/QpTq1iHDGNaGV82Xwsq98TIb4PRGV6DBjs5J2Z1rS2XzRgC91nL6p96CyTo6mpTXKyZjrO dqKzBfdTWcO28zGxC6LMrJTHp&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.hostgifthead.com/c?x=KsYqcGtG5P HlCvOHGHXXTVJLZ4KjkbH49CpmcLZW4I=&c=/DRcp0V/PlcUMFMFaM3YFJjSQS WpF3wIV31BAMedkFEySAauXi4jOMyWvxIapKSIGa3cq1uDNVVJapEWKwWoZ5fC1xZxyu296nq lTME19eESy WYomh1PxW7SCNl59&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.heartcontentvault.com/c?x=Tg70CioC xPQdCT/rizBgLqVIXTln1MYV4GpG/K7Kk0=&c=744gtm18mIx39OZiVIQ35WaKjd1/6P9qKk6qFFgHum5m/WQp2sXagMPQJmHAVGrDGNg1TZpuVW5d2PBst9nDvQY2/wBwGkwFaMfT xguyTKBwwiypoD6OUfw4yXIp/be&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.heartcontentvault.com/c?x=30 PIsQK1hKWVVghdiNFrKyQbsyf aR3lBO6IoefMl4=&c=kOahcOk9cjxyl815o4Lz/3Rp99kdXfhBrrkXu DP rPg2HBfSpULfL9oeOLMcA3Y1/RHrIUID21QyLra Ied9K2n20vBHhrAzwrtdcJ/GmogWsj1BulXrFV5atrmYQtf&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.flashlaboratoryapp.com/c?x=zMWiyIAlrjG3CetysrRoPlp50XQuk8GYzRJCkoE5XkQ=&c=m2ttoN1fZWK7mFrqDVwjQlBrqg9GBGiJf6wM/t1teSASk0bcZHxLpxUxv/RBRR9V4onWfutYl7diWPSAecvjZuTbiigOQhG1yk /4zhT/a oVQ8g4vazl7B0a/R287bV&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.heartcontentvault.com/c?x=RrERhhZtQwTmU1TC2qow3ry3eEbqBnIVsfKASIfu1YY=&c=n8TeEXe9Fx9CXj46V1FwdZFZTMFuFdtnOjy2fcZc4X4/xSEt6Y b0UNyOKb10u7vsXecd gzsyr2LOyhFuwNGD/To2BFmGCXpUglDnt6xqdUBMFK/sb8rfPbKoZLQH/c&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.heartcontentvault.com/c?x=ALyfKUAXJl/N1cfBcOK7bknwxSoFOHH/Fv/D93RWGKk=&c=QUDMHduhH3dGfb1BoDe pjsFsO1kHAvhN2kC/x4oivnP6ApgxNE0UFdqx8AGUJw 4IUC2hHNdR26OZe9P5tIVRAlWXuWRETTJAJw49Hv/Fbev2lTu ulGIhtFdbwtywn&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.heartcontentvault.com/c?x=HzXKVPmQEd1/8bj3hbb5VvkZQco/ljEzpFOcBThn2s4=&c=X11dELANPJTh2Ji/1ew5Ee1aXstT8/aH9ui1Q/Edfvu7wU1Kf1aLsUo6OIK6A6BSTpoqPfl/jM7Ool5cOGBHpnievIQCDYBrEB5eGSHcnxhMa9esuXeobu UQtqmCMLs&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.heartcontentvault.com/c?x=TnKOQ8t6/y5l4RStFryB4PVuy8PZstFq5gTisAJD2io=&c=eehxbgRq8DTGS6DD//vI4JsPpvoBFWnMc6Yq2Tk Nx6iPYXhZvEx58mL4C6EAr5AZadqCgmgR sMUZ3suGsflxHajr3X7VclqBv8l3PIfMcevw42jgE2N A7FoT5NR9&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.downloadsbundlebyte.com/c?x=DbR1sxKQIgjvhCLQWQkwoaaVhgTkqOAWsLS9d9/xXpw=&c=9QDenmoPGwvabKQb6h3TniIVvfEYl/jKmEM43FC5z0ImmcSvMAEV5OyNAIOBtdbnSdKZd8RxnKn8Y5Dy8S9eh xWYoYYl4fMGxyfRAvJYrlZ9IJ2 4qs0AAv/ns2u4C5&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.downloadsbundlebyte.com/c?x=ryrjfaGIhambgyK7RLPAsXz0JSBGVWcfdZz51wV9VqQ=&c=kpuu384Qzn2OgpktjYOUjrgbhOEkF2XRt5L0GIowixHcktlAiN43nDbcX OhDbFGR3l IOlKfEou9sWs83ScBptqm2WwABIOEi0luZXhtqeLdIta/zNJuP7iiPPyBHpo&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.heartcontentvault.com/c?x=Mp/xAipGUDP8XOqTVjreFZfn9yqNViOsUWzan6lVs4U=&c=16qed9xed8cnbtZ3q29KNbvghYWikFZNXqnH9aAPOvrNQjvlHluRses88R4D6oNi9t3dWW IEVhkDYolTZ2CqZMPrS1gR/WBmEHHq9BBqPobpoiuBe0qpZTvPurOwC6F&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.flashlaboratoryapp.com/c?x=wewO1/LNP9nM tqvvdJ0XvTxSmKgTcstDkGGZegIrA0=&c=m1gOska787EqbyW3OOG0pnkkJG 6jnJo07WyTW4fz6sSmXFj71NqX63fuwUc7rWJ1moBz6iCTfIHTdv1Bm0tJ2U7r5Qq4doBFIwIgSOCwcxCMR9KE16ish3H9C7BunnL&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.downloadsbundlebyte.com/c?x=rU7QeVa9exnjQop/OQL5oz3tUfJXnuzOiYlLau2qIGQ=&c=TUQB9ZHJRSiAm63Tp HlL0WmpudBHzQeUUINahzP3A s8iW/c41x/HqMrv7Z70/d1R0WN8Ss 5FpGi7jCab2jow 5/Z7B4aHZab5iXw/aU3EpX4fwDyDd80yOZS95nY0&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.downloadsbundlebyte.com/c?x=eCkZ4uyp3G6jO84Ds0GzCcmrO9S9ykzh0M6qL9IKMkI=&c=MaD9UYgyP57UyH7geHUBy0zVgcADanlulaQ20sdYqOv6PXj7FKCsfP k4Jh6e8K3tsZR/sgAIaz6oe/Lc1nPUkCns7A 85FdHN/xnRmWZ/WR1Po H8xJCjOFQznG3fxJ&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.downloadsbundlebyte.com/c?x=b7ITHTmvCgknbrF1m3oVN7Rduj4IcOk9Dmt9lSv93yQ=&c=9jH7X9lgNyXs6XAj4qYCZFSNKBrravVriG hCNP1o/KHr4cG4lONJ3k15/cTqHajoeoBx9xKOfPgqy2TVSma4dN3 4hKVnQM tisG480ToJ33LzEaYVjrCFq5ZCqyg4/&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.heartcontentvault.com/c?x=dj3s0rCvY3b pKWde3IcuA4DwDQpBE37RhkBgFbZ mM=&c=npSuLXWwqeAXPJjWyTgdlSN3cdKJWdVq3wYZyofWyXvipD LsM2VKWRW5lurFDl7lwN1gXlgaLHZHzI6vQkRtnV1ZYc CLR9ASjXEFSkFHwVCVFrRaJcopbuQ eFUnU0&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.hostgifthead.com/c?x=6gbxXsVtPjoYDYey8YXRrtjSjspI0cCpTblJMvkgwI4=&c=mDpM14U0Nr5c88ui1VAXZfxloXToF9g58C9rlf5ah1MX1oExhxgdm03cp2t6ujFOnDDKYZG5w/p1HrU0e5ST0y7YEIKwUZC2fLkThG7JvefdUuxSgJUA2UtYC8vdVVPs&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.downloadsbundlebyte.com/c?x=etY G6NZx8qYu8lwYUHLrmrVgZlekBh56GRN/mP5iQM=&c=m4ZCFI4nIoXQrKasnyMEJBVJ2erOT7InBLltV xlmPV32ZwJXe9CXbO4q1gDz/lezbxtaNC4Oxe93vlS1x8fUcfbboVKb/BICk5VnJ9powx691D3RANiHJUt5vrIOzp2&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.downloadsbundlebyte.com/c?x=Mw0yEnyyU85vC9LNvl1kfuTwykx7F1z AHphBddZrIc=&c= drYpKvavjx44PZtUjYakAoOMB3UGI7LZwGTu8rSSGlMZiHoZHyPBJIhREe3c893ZwVV/SG7k4vWM35pOsOinCjOaM0XIBsUQfCjAwou0z/g4CINwufU8YwboT9DsfD1&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.heartcontentvault.com/c?x=uw/7TQHRJXTy7/rMthx7LpnsNEyqP5QGft53DCqrxm8=&c=VZOaHGyodz4Xoh18cMbDuJ8l3TUl7FB gdrPJv zZBRFg7QAVK2ZFmfyABVHDOWc6Bjum8BvKOYdxV /Qs0krQZcPPaSRjAh7MSLFyMhQg8Qk6UDdQSF0QjbmNGukq97&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

Latest 30 of 42 download URLs

Remove google chrome setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.