home

google chrome.exe

Web Internet

Silver Setup (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application google chrome.exe, “Web Internet Setup ” by Silver Setup (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. With this installer, users are expecting to download Google's Chrome web browser but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Installer   (signed by Silver Setup (Fried Cookie Ltd.))

Product:
Web Internet

Description:
Web Internet Setup

Version:
2.6.3.1

MD5:
6b221a5dd58fd524abd9a39afdd4fd76

SHA-1:
29a1d0c38894fe62a234a4f71279cef2bdc18e98

SHA-256:
7694f3da4f4daef421c7400cec4b2cd81dafda75aabc636b01663736c33e535d

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/28/2024 11:01:44 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.1.10

File size:
958.7 KB (981,744 bytes)

Product version:
5.6.0

Copyright:
Program Application

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\google chrome.exe

Digital Signature
Signed by:
Silver Setup (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 5:13:58 AM

Valid to:
7/24/2016 7:33:54 AM

Subject:
CN=Silver Setup (Fried Cookie Ltd.), O=Silver Setup (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112140334915ED026A82D6160FD4F0BAD4D4

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Tlb4OYNoBU0BYkZRDPCRx64rZ8NuQa2Fie+IfcY:T1hNS0VZdaBqc23+H

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9313

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file google chrome.exe has been seen being distributed by the following 50 URLs.

http://www.hostsendpackage.com/.../7HUUhCThqsLQ8p0p4QzzMx2B0r4wTo5cTE9H7JhiHIUxWzHTg98tdI&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=yJrblGxeZ9g73By4DkNx2P1M1v4p5sEVqUj/.../sMCYH5v&downloadAs=Google Chrome.exe

http://www.tagcapitalfactory.com/c?x=F3DNYMxRVb7zVpIXEuQGzkdZaRiYEKcr8crLfEE2wHw=&c=N8W0sUcF8JvGyaY HC0kNAhvUmx2mBh8zswbxW4mB959Tspiewa3H/.../zf7Tljpr&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=dX3CH j8C hLsR6u9Fc3rsIBoTJPQ5jhjjujthoKMgc=&c=K4g5Lb7QRm 3CrihtYNtvf5HLhpSQJEe8sUsLn/1IvonIvX x YkiGapHlL0 RiEq/.../mn&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=n9jQ5NxIXC6OI7OMe61IRW6A70OSQ5ediv/.../s5hM2TtTp5sb4LpCNiPrKbwiPNu5wIf8thDajyPfUwTu07eiusXbaNyscfyi4nahFL88dtMYUv2wtw1Ny7JF&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=FhwemsGhQAEsPzNBWxfGBJ p7r0zZlNDrnOfbOBNa/.../cyPiDdKglXrTP1fm6 J09nM4r2JhIByLVbXcW4glx8tEeTe&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=QmQl2J8t9QNP7nj0VtnvuYM3VMY4Kp3dfV/pn4YtvTM=&c=RPmdxZY/RHnIkStxDCDYcTi4MbxQ2EjLZiV3arhUjFOEgPa1UpdsW/.../8zEHVRSO Qjj6tmqv&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=isfUQSHvOqRgB57vzld252E04kgqJGCoh1 7KQpFJhQ=&c=IjMB89FoHYdFZRX49lZkmikFl2VLqEngHjH6l7LBHkzqvCT8lCm38zC8y5C6389xmX95oCWdf79CbM3xandXLcddtSMXKXBIwHilqfEtxS43LNtd0NjI0jhCXvyANbnh&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=aqSHVQXgJUBZPXQNHfnA sxiEwVQvwyR3Z/eJiBAluA=&c=aomFyN/.../bJgw&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=2pRjD7HuwqCw4pBlFIHO3agb27qrD5/u /Hgs0eHI Q=&c=9h8gsfdErFsi2rx46JikGWydBKugTeQMWJdP/lr2Cd6PemtJ2SreXW JYYaXy9Alx iED9jlI3l2WjCC8Jg6g4qWf/.../03ZBvXbUsN&downloadAs=Google Chrome.exe

http://www.tagcapitalfactory.com/c?x=7BWZtBJBVp9UMIx8tpsKvV2chqpXuF0J cbVz76lQJo=&c=XBMVyz4vetHmJ0MjoJZEb05abSPJzI1kdbNfE054E/zD42MvbEOp ZhD2PRw0 7jbIukr8qdUzGPVz/.../rUCjN9SuKUMVDfRCop7B99pEzQlJfNiuu5&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/.../J3ESNbGKPFSLLEp 6z97QRzu2CR0iwLwRBLY3A1tFRHKyVRIb3ho7WrlCVVruf5cBTNZY PpF0onfBRtsKJwu6NNnnwGA&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=RaBuoU6N35xlMARc0Lxo1Z/Mp8RIU ZkU9AlnIPR3bs=&c=/oExZEz1ga/J5En4Kh3mL7ki26vicWxM/dSADKdPf/.../j61 eP5ttMdj f2MSYpxX161uAeUp6lZL8kZ248HZydxGQWfGj9CWw4mYZ&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/.../YA6BPuoCKInQX9gFcJrZzR9WXtrcJwxSA4XO3WuoruryGiSq9CunOONG0zKcIdMZzj5VTc0jBaBhW7l5shNrF01pk5gbjHKkHjQwnrLDUWviks1gMMHON&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/.../DZ9POAMxS T4GCKsICUKFJy72OO1H3LHq0Ydk4fFAvjZ7KpCB9PjcMOhz xf2nVyd2HC2aRjcCRcibULZjkAJCTevFjlyX8MilFE2&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=fyx/25IHviK2yHCYKHtkK8ZnhZR1Pr/.../rWzjg=&c=ctlq8BwhcTzPvkbjoiPS8SGIRHCFMeh0XREb2ZvIJGnA2wWpYrBNr0P0H9HReKXKxoCHrKbUYvYYNpur MqjGUBoCZ1nJxQFNOjYNvLCc3JL7LPbzyfZdPRYu2FNgJyk&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=gRRN/lhDhCPuouG8olmmkEVDwYUbwyNcAE6STS7C4Zo=&c=i5CDzv4GiaNehABEzn4cVvFD6/.../C2IjgrhnQ ogv49aKCs9qRilo2OuGN3XZRWwXK5qLr6O40reyjZqyCu30RxhnaGX5docIatz3QzK9 skpum&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=Lb/sB1IKKd VxwzLLkpviSxAr73to7xMzWKDMpvjmFk=&c=Kn9KMnJ5Jisl9RpBvAdd/SvAiHp/.../PZ0MoFWxcSJuam SuD8y2EV0NzQ6sl63sphdxEQb4HYSqO4q3Ud3VV SgSrkPZ0yWFrCN 0VB11dk8v32Nj04&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/.../gAGl2wO8Y6VYORvpukZd 4NBnvzhYKjJKdwjfR6UUT5SnyQUP22feplNdo&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=52aAjqSJXrbbKw5accMh3GA6DloZz/eV4GfQTc/.../ttILvPFCwNRZdtK0gJNApWG0NC4M09pT46jEkmXUCqGlg4sStPpIhmfUMCawKbuJy9kL708qZNxFINSyKTOJF0s1LajTKiYsT0n786 ZV94Hb7UHK&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/.../cAuHGBPoVrR0C O2DfeWNeS2D7jewsYRdcUtfoJmQ4s1tZ2x9FCPzCSjOV 1biYduQWOZU0GIfbOGhvKDGE6eDELmwvtLIHofPcclI6DF&downloadAs=Google Chrome.exe

http://www.tagcapitalfactory.com/c?x=ZLNffSR/vhzZh3YRWW/ogqbpUak8D/3as5oQpG83COw=&c=zTr3NCfduQ8sUN9DAEH4EHgTVwh2BYcF0v0xcKwJpNVosdBmf8p8QcpFjL5Kqh1kMlaJa uD2ISQTsIRwlILAXu/.../2&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=71i9hcoqcfJKr3AVttwvhdF10VTL4GdTg82gRBaiIJo=&c=TBC2R9aD6jwPRHDDauUMoWtYDIbhUrohMIYUJtURvs8XkK3fBQtNQngamYOViBXhswcATfwsP2RWYNTMZnsl3imqOD9yYKAKZXziRNNwQLlPHTqGE BZeslk1IPSeimi&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/.../6AWDCcELuR HC0qLETxMoQhoNtro0kOjziM=&c=3a9x99KT5WbvnmH9EU7wK4UJdLXCBvQGFTPXLLCbjDAzdV4J62qLexlYLrcVAR6bLHzIUkkHj4IkcnouVvlIY2LLdjn5pjlGLSfWS8fH38jjocEQTU6s1ljOqEIeWnXo&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=UtPsdcZpTYk70FeWRUxcqOv1Msjir0MnfA5/rRF2S20=&c=deTC6S0ak9VAnVavtP23cK73esDtAjqpGDhOyMlsImZvy5x2WaZLjahQQfMyXmDkiH/.../XvLrpbGweiupc3K28iP6RI0Wrz2ObATm57rXZ6INiDQIsO5ID&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=SVF24Tm1j7XseT8JSI/DohwjLESLGHNgzllZVYmZAF0=&c=gWEt1rfAfBgcW4H4n7SqIfgRRE8y/1x4psQJbez1i0HtQSssGmUIsuimN4831/.../As1flEYqMgT7CR0c463wqrRejRemizMBVBwmtGWStmsiL1lYm&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=3B6CAbGcQnTsi9aQbgAA5ehILDoMqHvBoiSEVucGGBA=&c=7gJUI2ZmpSow1Haw7GPkgbJqnCi3WE6mPRewr3EKRXAlEx//BmFUQNnsSh33OeIAjgn15kIzbElU3c9EIs0mmcF/mh0 eW/.../5roEAChUYnEwL34Ej&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/.../g7soCDzod&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=VZC/2Rx7LhrVeXqgtSnTThZTbii 1FUXZywmK8ZoO8c=&c=xFOJl2bzVgN4Pp90DuK0rTiW4ZJTxurC/nwCNWPGCLUM5OmdbHa Bdrzs/.../3zsl1mPuIgDo5Og4ZzhjsVxc4n9HgrlN1zc1CM&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=EIX4VhbgYXtQwH0jMHM8BkVpAYH8EmoCWHabGhVZYDs=&c=5Kx3duXezRn1 NVq649kIp6vx5Osxxm/MqdaOojXwoQyet8qaabYJxj6fvzwdelctdtNKkYWbz qjgCmQpw7njj6ZcAPdXjvqy/.../WpgUu920KfbNwxTKO8EF43xCus&downloadAs=Google Chrome.exe

Latest 30 of 54 download URLs

Remove google chrome.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.