home

google chrome.exe

Application Installer

Criteria Quality (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application google chrome.exe, “Application Installer Setup ” by Criteria Quality (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as Google's Chrome web browser but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Installer   (signed by Criteria Quality (Fried Cookie Ltd.))

Product:
Application Installer

Description:
Application Installer Setup

MD5:
67cfda91efa1a4ef5c5a50d9318960f0

SHA-1:
105caf055eb7b4b6456f79c53b339e9bdec08a11

SHA-256:
2eaa64a13bd63304dcaa37558e5d295e315b3c6f1eb477d4392cc64faa0b26bc

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/5/2024 7:31:48 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.25.16

File size:
969.4 KB (992,656 bytes)

Product version:
1.2.7

Copyright:
Internet

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\google chrome.exe

Digital Signature
Signed by:
Criteria Quality (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 6:21:34 AM

Valid to:
6/29/2016 7:39:55 AM

Subject:
CN=Criteria Quality (Fried Cookie Ltd.), O=Criteria Quality (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11216ABCF20419312093F809F0E003C850D7

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:yN7LKXirSl5g5MYuHz9GNh6zCaWM4UEIBtot+k2G:yR2XirSXXYuT9GrMDE6Rk2G

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9325

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file google chrome.exe has been seen being distributed by the following 41 URLs.

http://www.tourworldmeta.com/.../4c97SbEHuUQ4DZqbohQe3PYe YaqeaM7d3JjDbJKJJtFbyNsvvxK6ToQjT4VgAvxVNwAGSWftn33oAJaRQTPP4jlFyEn5hVsgYG&downloadAs=Google Chrome.exe

http://www.filestomes.com/c?x=iUD7WI626EJjcDHQr1RYhibT5MMfBdm0BRII3RAAuT0=&c=cdMTXLPmhBgQ3NOmnDveshgf2 BiULjboQPaVN3d PXARw8e XZ bWNED40FpjpTG85vhTCbZREGZURssFH6MK7UVTQ EGc5h cdXKfH V3q5Hkeb3KICU3pc0NAOuw9&downloadAs=Google Chrome.exe

http://www.filestomes.com/c?x=fhyQVHthnuumG0E7JrmNlITvm9l84PYEl2V/dkDpdOQ=&c=ezttzXsJ4XEXQWm/W9oSBQBSU bpQP1s6KKl 2kjC3neyAS0WpCVBKftZzSBmp2iFcgwrr5OrYj1Lo4fEbawlLluN5DF24Aljr458OiSPEWwnNmO p0RAEUhzg/.../&downloadAs=Google Chrome.exe

http://www.giftbestsafe.com/c?x=Ur8/hSEZnKWsvItPIfWWsZXiAweq08Iq5jP2/Sy1lPk=&c=tQ DtJu2LFcxMO f5zYrwpG5b1UvHnnfc609/z260PFAwSpPacG4vynsKX1eFJMxShwRwdEqPbWoUIdcSo/.../Aj&downloadAs=Google Chrome.exe

http://www.tourworldmeta.com/c?x=LYN9HszYMCkPCQTNkxJlRBkQYXeeyZr1vxm6ZmvP0dI=&c=AmpNDG/zar6suFyY6r/2BvNn1EnQpqGvvFw/.../OdLm3wBd72yj&downloadAs=Google Chrome.exe

http://www.filestomes.com/c?x=3zjhxth/AclZ44zPdgbb5q9PfBbZnB79a7hFAeKrnr0=&c=mfeg1YfvrMIt0yHgLUKqyGhV031gvg7kPBlexgk9Z1NezY YcFQpHnQCs0Rp6oZDoBW6S3zdPC9YuRKV3VmpBaKdr09JoBNGXoSMq/.../ZVX8bu8gbmILAXqGLpH&downloadAs=Google Chrome.exe

http://www.updatevaultsshare.com/c?x=L2AR6HT/NWLkwenYr5EID8jIj/Ga0sswL2pbqqrbc8c=&c=eD7/W9oxYaRTqM8hQupvmiFyEihp8L3oOZqi1RgCXhFUY5UKSeAgm/jxPsGBcHqKosytn84AwDjwMMXyYU i/.../J5ocaXsCWjs7O IwMoA1AG9k69&downloadAs=Google Chrome.exe

http://www.vaultranchbyte.com/c?x=dKsb5knvfJ/9ElRramQIWE0F2zyDXaoRUmaGVXcjgw0=&c=5zziCOIqSNuaK7jBqR678KxX2SOinwZLjlewFNNpcE2xCJT 8x30/ZGN bbK9Xu8YgV2IwVFTRaUlGTBC4jw/QP 2VHB7CkS/.../RTkw&downloadAs=Google Chrome.exe

http://www.vaultranchbyte.com/.../7hGSkx43qYldOp6ffUmwtQlWQyh1i4 4nthA5v7Fe4baGwLXNmDrdJRwYhHyAthtKt&downloadAs=Google Chrome.exe

http://www.nowappclear.com/c?x=K 77ZW1UjEdxCEccQFEYHJfp2bq8qzvRHxu4SvVoTXo=&c=ylyzn N9FUXT80HcGyQYsb40xJQW0UuPiOUv L1PhZwJqsOcj 7dF/hkZW4LwUlQtjastzwfw4pYbpFh/.../qlC2ZTsJF&downloadAs=Google Chrome.exe

http://www.filestomes.com/.../2w3nS&downloadAs=Google Chrome.exe

http://www.updatevaultsshare.com/.../9gHU1aDaxP7LHttGu9Qb391vc8rn AfYuoys3so51scdmlilCy X3bqaf32bjTmUQ kPuCB1fV9nH2Z6e3468usCNA5XoMAcfWCsa2SfNb0R5Nz12ustU2yEMFef&downloadAs=Google Chrome.exe

http://www.updatevaultsshare.com/c?x=uKuu35hCqmNo1r8i7p5Ibdjt1aNJNLy ZaMcnT4P9X8=&c=hdlB8r3dEQZYEYHyNtsQnk/Ib7Wc3T7hhAiFtCurLKkC1NKn/71E8 3p2jl5A4RnEHOwPs1FQfJ4MiUl/.../x0lyXF85b8t0 &downloadAs=Google Chrome.exe

http://www.vaultranchbyte.com/c?x=4XHizNitR8D9i1EDObsjg4eEllpdSmM1iuPeX94a9UM=&c=g/.../tUHwUXbevExqiZF5DBsn0txZFJrD2yAUV7ch46Ui4TV14eM&downloadAs=Google Chrome.exe

http://www.giftbestsafe.com/.../DSLBCCSc4fBA20=&c=wnWNWJ8kt0noAlgBF294BYGtum4EAjctm0 n9sM0EM8033suFCYXhX qIJ q4rCLlacWQpWjFWZJxNi 8wJCifnvTICYVogKw36eEq4nRkyZGBdyfO IKje0bGMSr2y3&downloadAs=Google Chrome.exe

http://www.tourworldmeta.com/c?x=7XPzj/2ltU NRpYExzrj4thLLj481tl5n/Ds/UfW/Ns=&c=r9y1LIkuuICNUTumU7SZqlnbgCb1bBslpbQWUw9rfC6aADG IKwERG1 wCPNXV6k/7ZEO6OlC RgAwqbCuiRGatcv /.../JAjkxcEJTzAzU36cG6M1J26rD&downloadAs=Google Chrome.exe

http://www.filestomes.com/c?x=tWRVmu4Lwpy9ubWO2umPSKh0bQ5gn/RUsM/W8qVLR g=&c=xBJnqiDnRUMQDEO/.../CClUlTy0Ef3r7MwsGzEumwgzjUQ2wL3Oaz9HVGI72dPVMWPNf8K6UogOkgDCWy8rjOkxmXTd8pE&downloadAs=Google Chrome.exe

http://www.filestomes.com/.../2YmbnmLw3CcPnGzXwbyY5ahTXhTx9ufyz077YgKnU8XtECTXYbvMeWOCkzycuFDGNzK3oDbbHCFIWsOHKJ&downloadAs=Google Chrome.exe

http://www.tourworldmeta.com/c?x=vr8jB5BIvwAJgYHH1EopiBo8QCPQjjNaUNr sFNhsRE=&c=s1Nh7M/.../Mk1U4EaSC9uxmuJ kMppS&downloadAs=Google Chrome.exe

http://www.updatevaultsshare.com/c?x=0QlFhNBBF98eFNtV/xFjGSKeHgbtR6VgGsCrGWFHV9o=&c=wdJdg9tb70k2gzDqDYnTu5OO3UxDYp/OCT/n9ilJON gLFL2ssqaywttZsIL6U3/cdZ CWDdoc/.../3ZUE10G2ebyeuyJI&downloadAs=Google Chrome.exe

http://www.tourworldmeta.com/c?x=QVcFtgqvmztLxWFkCagjCwU12pk0ir/pgAycVR33g3g=&c=Lj4pA3yPahgj/o3GV7ZLq46x jZ2g/.../S3jZrUd0 SwFdSF1nseXZe4uXEy VdH1XjI3q0FkUDurdGCJmBvShjV4B74vGkRLJhJ4LsbgBxOm5&downloadAs=Google Chrome.exe

http://www.vaultranchbyte.com/c?x=IIXVqmDMk1jKlcykSgT5h6H6sqsxMEjQ8UfnXF3qF6c=&c=klpmHAN3kKfYisid1SkQZBsLFGMAOHlpZIBkQTFsbGii s4L7Pa4MhQnOGZ6Fgux9NiH/PqsHcODu57V JNI8USpPD9J7r/.../M5ULh&downloadAs=Google Chrome.exe

http://www.giftbestsafe.com/c?x=3//s8M6gYCcGV2vsVYtTBiVNEtNE/JQNNkD7LxUDQj4=&c=5NbEl/.../4l1gxylJSnN0DvULPbWQnfJG&downloadAs=Google Chrome.exe

http://www.filestomes.com/c?x=omm2NMcsBz3fbf53WKpf/.../g=&c=OOPdBYTUISe5Ffobrurjp6PcTlbUw0kLcQgIrjMOVxeEkPgzbcLjzgJNn9VB3uBCHmGLks5ef61bT7B fV2sBCsuycuj3iAg7D9qBlPF90EHKnnFU1hreWIVH zwyhM5&downloadAs=Google Chrome.exe

http://www.giftbestsafe.com/.../F8o rIafN7Apps7LNBJJBeSUZICOHf0FRuoEg=&c=lbaNAGBCcRODFQ4onmqqOuMfrciWQmlzmRZQY85jW0t2vOvf5G0RNhbs2yQCrRpOFy9pOfaewq0tm8NbJue938zoWuRsX31U0TrSdH1U43iQBHToCANmQg0BToJinqaM&downloadAs=Google Chrome.exe

http://www.vaultranchbyte.com/c?x=Q0Y5UHVUsOUM5v5InmPm/.../C1AMfZmFFG dcpKkRrTwRbjWIcZckwczUeXGLwYkBXmprItDXDiJVPdDtDfETh2CIQ7IBBzgzF K1oKlEA0Qc2b90PIB&downloadAs=Google Chrome.exe

http://www.updatevaultsshare.com/c?x=ZhtvmOi6PlwSnWj1Qvy4DP7up10oWeoWb4AalX8ha4w=&c=gleL2KFgDDjapJO1mpK6XvVHNRPsNgFXyBtiup17BgW5rv7iDj8mOE9RQ0ZSb03mET33fp/.../f9BuXVDlTYDF&downloadAs=Google Chrome.exe

http://www.tourworldmeta.com/c?x=hKM9CHYr5ziATxlmDW7 DkTXL/QCb56982lR3POG2aw=&c=fz24SrSP1420vqU5Eu0et5fy05EiR1mX3yGxxuKyBhptA0W4SeY8ZzbgJe/.../KjIZHyw8E374AX0&downloadAs=Google Chrome.exe

http://www.updatevaultsshare.com/c?x=6OI/UhYBxskZZs5/q8OSxJj8KE2gNqu/FfHcsur9Di0=&c=SxCu9JW2CLo6oGug5EINzN8dtSA6YV/nf9o/.../JHdE9B3TdqPkQrSyErFlQg1bfCkxlxyjuBHPwJnr1bfdGtIb&downloadAs=Google Chrome.exe

http://www.updatevaultsshare.com/.../pvHhC4OTzAzBdq3GQMKng6w=&c=amtC0vGiqdO5WsNz4JDijrMk4yyNaH b5hitgP46fq8Fnk8YcjXd5ImNdPwaqyQyItgC9hVRF331X9gHnCoMpXaK1LaJoIM11QMzTn6m8RL2J5kmWDieLXTLkiHf2LBd&downloadAs=Google Chrome.exe

Latest 30 of 41 download URLs

Remove google chrome.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.