home

google chrome setup.exe

Baludamane

Max Criteria (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application google chrome setup.exe, “Baludamane Setup ” by Max Criteria (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. With this installer, users are expecting to download Google's Chrome web browser but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Max Criteria (Fried Cookie Ltd.)  (signed and verified)

Product:
Baludamane

Description:
Baludamane Setup

MD5:
06fa695fcf6514e37313296bcf434a2b

SHA-1:
fc1ef7ff9d5a9eba470e20a86b3fb5f510c37193

SHA-256:
d4a9e7e88b6845875599421c378a8034ab83bdad1f4a23d9a41e67d631390ec3

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/27/2024 4:48:18 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.3.16.15

File size:
1016.5 KB (1,040,904 bytes)

Product version:
3.8.1

Copyright:
Internet Lite

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\google chrome setup.exe

Digital Signature
Signed by:
Max Criteria (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 7:00:28 PM

Valid to:
7/24/2016 9:07:50 PM

Subject:
CN=Max Criteria (Fried Cookie Ltd.), O=Max Criteria (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121F0C6B8EDBABE266B325280BC664A1402

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:otUN881agIRk6fvFEdxg9XUudWz9vzOVrj7OKzA:otg84ag63SdxoEP9vzOVzO2

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9115

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file google chrome setup.exe has been seen being distributed by the following 27 URLs.

http://www.vaultstowersmega.com/c?x=Kalq7UmIjVRcyAPrWA6FXIcJV2COXXzepo0CtOxy0yc=&c=ldAk7EDoXt526/QtY2SMTVs0n7hMIEJtJidI3NfXAkKvMOamPClvnKs9 nESDADFkKQzhmrCSpekp6a 6g2UuUa2ZCfeTwFhwlWqS8afkwQ9sMW CNbKuSi1y28FC69O&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.bestconceptssoftware.com/c?x=7LEoezu/xR/y4DTHxXsRTor7i1kGpVEFNnGjdbg4T7A=&c=XPmKEK2vnsKU2DCF1rzohgxNisFX1szefnKToq/Rh TWw YdKGcBe2bQu91aOOfDJ9/j3iFOapqZ lNuiNk4X5ZcpolMbpSS25fDf7LxF6Fh0VyKLhLSFchzrC9uTQH3&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.towerbundlesmeta.com/c?x=zvKBRwWtBzouCUoo60a91V0zSYSQsC3UZKHQNm MAOQ=&c=48I4ZL4njaqkbdXBPqyyOOG62LOsnTAyqW8nfVkknvAA2yuLfiTcXf4TWlEj5HLFSZrqEdeap68QyoLjL2uNrk2sr/GynOL2SjHjcDhkWFQcfoGIW/KQ3Az4KmJt9ih6&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.clearmetapresent.com/c?x=GP0SGcfKQ73 oN IQiPh2G7VWjixMTJ1kpdRebBS ds=&c=6EDTsMjBYrBNxLavSn5HqbVnHd53kxQJB6WTwUiHPgYY2LepQe5ixSWJsVPRbRJVCSNjUGr9aPBvK7MACuakWqD1trtmIe3OaMS x8AGzc5p u1/1o X4aQd8chcrpam&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.bestconceptssoftware.com/c?x=njJ35NintJhxECzYr6 4eaqi3aB6gVS/aFjJWPpaYKU=&c=1yu 4X2ELXZeg53YkfCqYhEKENb 5l8N8Hx5cnv4fFJ/8QPUzEJzYwxA3LORJg7KPLrAvXcZFWqeYKEnF23yqoXePr65Ctotjpxdb5U5Q846Op5d9VjOXbHLSKMTxELw&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.currentbinariestoday.com/c?x=7Yzko38epOw /t64E79vjDGZoHp3IT1aSj4tvwXkIPE=&c=UfJMZYvyBIq5rQZ/BqczgNbb5NMVUsp0op5SjCSdIAt YH W7XwauoolOfN12XhYBGI5j2bq4Uv6bmGXrjNi84xOBDmExQFjNxMDFAJJjoJlJbmZe1yhcWIzhqamI7K5&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.towerbundlesmeta.com/c?x=g4NRwW26jocKJ/IZDq7MRXH UUtH6mdIAz5nco3FfO8=&c=bkYV9ezzhqQfNGzuVAg0SN7GXh235Dg93QDGSeYmHk4njY95N0l1y80ARuC59Ef2IdaMiHVodxpyGhv7fU4jhBgbWwsJ8YYFusLt KA O7ytL7EbCP81e0xz4yHqYNYk&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.towerbundlesmeta.com/c?x=EXVa6gAOjrQIoPONK0tZX749tQoElq1vhaQ6DV9n2v0=&c=n0TLMM5fwMc/qnSzkRX/98XE7HQ6148drVglR0CfIda3PqIH5hr69ZlmXeNwuwynS9v1vMTdTJdT0o94T20iCtwpVlgLJS18Rh9h8hGetn1/ezgTooJ6e51WRoQUxca4&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.vaultstowersmega.com/c?x=qh8ZhlLEEhsnh/MlIuyf2hRMLD6tJ94kqRNNr7CNp0s=&c=Uw3CftGo5Uz EJC96jbPMbpMom8Be/LaT3yoN50r03x4sUlIYilMC1cm2f2spUX4o0RA0LJlqTz22dXIl1V9htWvcXenDuVOV040Pv9V8TM00U7xIeIR9DGaK55IiH1Q&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.clearmetapresent.com/c?x=eZvLtYBMv/LLDUbSDou9 poUem52by o8ALcDlQB50E=&c=6R FtC7d3ywSPhsEOoxekpxjezv31Prn11FEMwI2trnlZ9B6xwP96pJWO5Dl592D1b9aHWWTRNyMiou8/1ROfNqZasbe Sz7QcCQV0fXu0jHsGy8gIVBph2x2DmkPRAV&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.bestconceptssoftware.com/c?x=Cm/U8vdUFeo4xa9mc9gx95VMz4vLMluk0r2PlP/FGak=&c=3vvO3Uf8baCzBzsl3E/bd Rm4dnx8DSEedawOt/rHiZ4Wg5cHSAe/25n3jaRPkSqc6go/444HficfWyDHUh OyJJ0Dc V kxhoMhISo//jG6s3QSkf9wdkWTUM3YLYLt&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.vaultstowersmega.com/c?x=Cb3jzCtR DGoYmuR/4A0sXTShiAyXOLW4Gz4fO4ZTPQ=&c=p1h01lseQ/OwT1FSdgh4vSbeju6I0MuKPNIRug3ZeqNgn079JlGzIImImubjukfF0nZH1wNKOB6BQl0i44511RQCo4zN2qI7rf/hOeylsa9yP17fjDtf9/K87iJRnHS4&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.currentbinariestoday.com/c?x=vYs9g5L0HBM561sdbBShplPaUoJFGNnfnFTwGtTvdtc=&c=Y1GGXEoR8mdRP/owD6vAQOrpxZi6ow3bTVMR3zY1BsuTKtDo63BebxG6qBEL5Jme/pS7sIYPnifUzOYv3ZYHnEvaK6LWf5FfsWSXNId3gsaBwbQDJaydk7r5rKOpeSO5&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.packagequicksafe.com/c?x=MakkniISq3CJbLO LO7y6RLeEhoVv75xpoxOq7faZ1E=&c=uwY6g/xTzBvR1ifVKabdN82M6wZpWk6SyyyqOrFBmRHx55H2XGnVH6C0xA9 WnUSfOMhMoOIRwtiDevvWCvL4JizNAdvvjXGxrT95PBTtH2Rrzo2nffTfAVd qOcNh0K&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.currentbinariestoday.com/c?x=dp1w8F7j76Q7abYK8mbJbSk5z0iNUfHQcgsCWrMbKu4=&c=BhRrK /pJYdEOYg8jTHYAbe3P9uwEOdYXjw7Shtzrdv/5cOcjk6p2eiMp8OhkFN6p8IiVwcK8kjiXUkOj6agwWZ65vdSPfWpKXZgJH1B8hg9FQ1cR50O/tfozdd7M2x4&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.vaultstowersmega.com/c?x=oRv/dZMxIBvJwHE7ql0AqTWIXhP43qUBGEFPP46d0rg=&c=sVM/cO4GKU53OGvBeyI6JbIQsEngpbVM9zxQEdf2WqCHN7/Mt/rtTT/9futc3UYgTFyHAYO/ml833NL628oiFey6LVoTd2Rw7P4pSc3Rh3KsS9EDMVUlpe16ICqOxGjj&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.currentbinariestoday.com/c?x=oEUrffA6oAqOtuPO0sjYumMfVDPksEr42weAiEtMYVg=&c=JFMX7PAbcdi8l1LOawaCsSNLe9gzRvB0QfeA4pF3Lzyt81dG1IlvcwdAC2FKW/ATcSJpa8J8rf05gJt3YTxul/UI2h6RcPzRs 4cJgDN7AevNSxJVR8KJWRE3rB9n Kt&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.packagequicksafe.com/c?x=UetN4DET3LYhqS7M0C2WhV2TIv5mEAa66YXmDa8J8AA=&c=qu45AjAbA323vSoj9PH2f6mBvh8lcbtszraJ6zfm0QpEc2QpcCpfqONTGEPr3SayCqFPFW6g2Fm1KWSC4d dqd/trOK4jAXMpOYbplE1vctm09qB5vJoXzs2ZezbDvzR&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.towerbundlesmeta.com/c?x=jEjLa6kqWJTgv4ie6oQtn8YDMyF1k81OCzlGAi3CDgk=&c=KTiTfcLCQl1IX x6GphS IVs F9NGYXBp1Ve10UFiB1jwZRFHIMkLXM7WXO4hbivoK9Vm1lPTLAecJhGSUoXoenomiiFYvKBcg8hPA7XWpYaUvdsJPEky2DKXvXBiBVe&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.packagequicksafe.com/c?x=N59xErWOgGpZTQxPFIrU76WP4hhjf8OU8OfKlWS rps=&c=UeDFGwrNMbT/RWwSMEZX/l82DUv/25frkZmXlsZI1q4UCIf81o/PX1u6eDhqWeiQ6mft0et s7ja bAde/zPeCZmu1kCNH3e948SUwVAZuScNT6JqRQwauFer6c5n YS&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.clearmetapresent.com/c?x=K9yZBDzKg6VfqhHaYby9l0Xi8eYZqMuyFSGd9O9yMeI=&c=/wpgbbwCiinA34tMp gFxyuo7A/hzJFZfkfmVh5w/i/0scxcMT/hptwIYg87yzhMi/HGmbp0NCfg/tAK GnXE0sOkwcAHf8dAaRztDkNk5eW97I9E4se7etxZRJdk/Ia&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.currentbinariestoday.com/c?x=CI9GA6aaIBATlU1YxXCQN0wjLjXQ R99d2XM8l5wth8=&c=Vj6jdqAfrGVo2URnRB220mSa4seP6LHMZMVlCKs Fm/j8grn4n78GfjMHskBTHw73tx0NbVPyROeEJ2i7n9e8WOBTBAMfij5/3FwvaNS4V7evGqaukxEv4qnYLvMpsJt&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.currentbinariestoday.com/c?x=76soCw9a9xCsdSdiOIHMoQn2vdYA3nmbHi Ae67rY0g=&c=TNTyWl/Kzg0KNMWD8eDPfofOOeBUgvG/084Gos7D3q5KN9bV6e81IP6JaPJm8V4xs25coitTOuC60rzFf3FEEd0Od4T0vVVE7TtOge/EhJWWsb5P3eld83csRJE49qQg&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.bestconceptssoftware.com/c?x=KdrQ6Pk4I0mQgUxnPCRGyfnpH1bTcHVf0jOFRgHUu2o=&c=53eKBc2JIn1BruUJX3xtVYz23BJfPVWSLiOCz6PcTe7QdZv2pfHVSHExNI0AsOtV/OH UtddIz1v bTXWrtjfEUvSLBcOZkX5/9T7WMtslYI YQcum mAGCFf4/ZixH7&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.bestconceptssoftware.com/c?x=bEWMvAiXMVenvnN1vX6vqWaqTFj LaDSAEEIPn7V0U8=&c=xR6mnsIZB/Zaj19s9oNT5jvPzqGj2IGNO6FsStu rVY32664d9zQHwil72rq4e6LXs lDY5VBtHKy4FO10jBlJL5yAzPYjwzfuaryenx8uQymiUmbyupVl0Y8KcNqEvg&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.bestconceptssoftware.com/c?x=blrV AAyBON9tQ1EcR1GjBLpPjz14yzjibtIMdOejSU=&c=O4okur9BZG9aXr wWeVDfo6hqB YyGwECCBlomrAJCJfEeWbBURtVu69YJ6GbNGaIf7ofhj2eIZqha3INP8YziwU4VLcRsU7EfNmYQqguW6AlYAiLE1A87YwmDp2Co5A&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

http://www.towerbundlesmeta.com/c?x=aeqajWJbDSddd zdu2WD18ntXMkHF93cP9D3oSmhI68=&c=O179jcJAQFqyLZBKq/gRRFGALJDmAyQAnaSHtrOyF N0RaOWPmliqTSq4DY Wy LwmxlSbbuYGS3 irJFcpt391c3hSgkfO199JwDNnhCN6FdHh35Hu9XFqG7OtN0PBm&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php

Remove google chrome setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.