home

google chrome.exe

Internet

Criteria Quality (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application google chrome.exe, “Internet Setup ” by Criteria Quality (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. With this installer, users are expecting to download Google's Chrome web browser but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Web Application   (signed by Criteria Quality (Fried Cookie Ltd.))

Product:
Internet

Description:
Internet Setup

MD5:
06ac61f543ccc581ab81027c0d25788b

SHA-1:
57d4fb15287d46cb1a18d3a67cae28c4698c617f

SHA-256:
008d421e855ac216370570cd8929dbce987d1f135d2d429b91c50879753a1af2

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/28/2024 6:59:34 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.1.18

File size:
955.9 KB (978,832 bytes)

Product version:
5.4.7

Copyright:
Program web

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\google chrome.exe

Digital Signature
Signed by:
Criteria Quality (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 7:51:34 PM

Valid to:
6/29/2016 8:09:55 PM

Subject:
CN=Criteria Quality (Fried Cookie Ltd.), O=Criteria Quality (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11216ABCF20419312093F809F0E003C850D7

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:nHl0J+JinXu+fy6jFXsxRbvUyRzkDeQI+AMuuJVnsWbY:nFq+JWrjFIU+oDi+AwzbY

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9298

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file google chrome.exe has been seen being distributed by the following 50 URLs.

http://www.giftcapitalgrab.com/c?x=3BPL5E7z9rC81PIaerP3iS4AcdSalNyKj7gjG ZMhpA=&c=fZr Nxp22iof0mKowM7xwqBuy3jd6sDXRLqskTBxwKhryYECvL49bLBGLJTaaldVwRcvce7n3dRqC6euumB3RUCPD T1oSBdSVRkfjKd3uNk0egGnfKVwJCWhFirQWjb&downloadAs=Google Chrome.exe

http://www.softwaresafedownloads.com/c?x=KaWonAPjr/TP 2vkxQV497dMS7So7y8i07XD ybG/Oc=&c=Fduqo9HlzznIdq9CgdNLwNrjXW2AxK 2hdBjNhHFkABw9a9X56wQiND9wusZXAsWlG1BEtnu0oZgVvOilusUAuciGC77EFPOBXylozz0N4/.../y&downloadAs=Google Chrome.exe

http://www.cdnfilesandstorage2.com/c?x=BEXwkqSAohP7u3MuzfuKqGtqfCZHcQ5PWFBZYoNVVNg=&c=twyeMfcM8YU1bD646OeITfJyFwb2dsXnGiBaaay9SSIZygSILKBtKmQXYBdJMjYp0xlkdUth3ydfLiTWrASmRpvb9OAPvtSfd9KUHdrqSYpgwSmyTH5MqYlrUi5d02T2&downloadAs=Google Chrome.exe

http://www.giftcapitalgrab.com/c?x=fv5sYLvwHewsHjfuZyVCisgRya6/.../wUW7UQSfGHTp4eQyqPxBoOgFwvxxPGJ1wxGyYXsE0Zkdr4oydMIi5gmnwzu6bwjT BczuasV6P3lUxY0sp6401&downloadAs=Google Chrome.exe

http://www.giftcapitalgrab.com/c?x=QFQAK yGLDhbgfhm50FzG9jCUZnfEMEVwN/.../KWLW3tzm14wVTrdPVuyk0bbS0RPQtzNQ0zOkUWuoc0bU0F7rX&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=RvlD64py7cX9xbk2ChaVtWsM4OMiP7puWS/8la8YyJY=&c=ZtJIwaXjumd36GyWyD/.../I376WIbGrY4iSgMtH4iAtfThZxuyrZrwOSxYtRO&downloadAs=Google Chrome.exe

http://www.centraluniversedelivery.com/c?x=cwUSKEu28OSV8a4CfRPfSdBPoP589kPe qfiAzzMzx4=&c=poD2bQ6CxU7 4Pf7kB2H9V4a1GR76kUUTFQPX5qIonhU2y5iei7Ds4vlwfLNuojmz6tQPeljsdLbdtd2qWZFP fO/.../1t0E7j1KFSTVnDYCGvF5o1XqBNho q&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=YRbL5XIP1vkhefZQ npO9j0AcqYDrzBq3G49h216xGs=&c=uAXU4jUp1rxn1kjOyMXp12ZH5Wh4X9iCFPwgiU0pyg2un/.../AQJ7&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=CCMHtZcLav Ln2SK3ZhpzSZrLCPoV//oOrgua57pH74=&c=72GrjV3KSsIi10FstfYMGUrge7bUuoRtIX0ef1CsEm1wbJrvMbU0yqDSmMT8uVBdBg8 ksKC0E8BfajbfoDSf8KSjvl279UpEvSBX14pfTzOs9Gi61mhqhde0Uyt54w1&downloadAs=Google Chrome.exe

http://www.giftcapitalgrab.com/.../ejjsRSj7mQHs1DqwabS5IQc Ni4We89DfpknQ6GLlQrZs4UZmZPUDadkN bUbhd YhDW9YbBYnhXkHdD9MmHGzdLxJyULKeNHcjKiI1TEPzp4i3k61 rSmV2N&downloadAs=Google Chrome.exe

http://www.giftcapitalgrab.com/c?x=JhQtXLkEnsdKHHeFsDL0t66nYcomzptQhwabrLfbHVU=&c=EXxA9BVYaGWGfCos/.../lY&downloadAs=Google Chrome.exe

http://www.giftcapitalgrab.com/c?x=XpPANjAJVRix59rxnm8MJV8J/59fvqAocgBXZVH7/.../hWwlWAxkUmOPynFZiDqcpr1STUVjoXdzNNNyQwHWk8sBVfz4P9prE2PwLgM9&downloadAs=Google Chrome.exe

http://www.giftcapitalgrab.com/c?x=/.../3kuXDnReAG4FEE9nPW4Nk8KMCJYh0HjMkZE=&c=OFFyEYZU32XJWku4fYslr7ts5IE5WgpaJOIIhwl5n47XNwmsbJSLREN07MphMaV8j1Lgd3rimKwL5a gIcp4pwTC8Q0KHblxoZABKm8tPQZUFs3XunSLG6svus28Xhzb&downloadAs=Google Chrome.exe

http://www.giftcapitalgrab.com/c?x=/KT8oE8EXmFWYgGvpnD67kQROvEbBg LIP36hbBcpyI=&c=BlaF0/.../is9My8dQgf3Ura1tWd5DZzPpA JvTx0U1KhIKdann6JrzRM5MpBwOoGOmAK1WoTp4jgYX5ErLsKy1TjHXz6oDiekm1DeoSHSU9ZcwjHosbqQC4GR&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/.../zz0OGaBPNET7Nc=&c=p7Z3tRxVDsBiCQQkZ1yrcRKeyOs5Xxgljl2zZYxLiUh04HdS2rQX1YcZARV aJRahf8iNvGYGh3z0Hnb99fAGfWu3GVPSjvVZ2v0k82NpSs6TSjRFjEMJUDJSLqWyn8P&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=25KOjH7pAn9w6eVr2aEyNrSskQyLWPgIXyRUKWSnfJ8=&c=6Celz/.../Roh3M0eedWxEQT&downloadAs=Google Chrome.exe

http://www.cdnfilesandstorage2.com/.../NPOyuhICtYfbHeS5x57rlzUK9c8VMzelU0hlH&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=Hn3XI2 5LDMMxAv3Mrr9x4Xl5EDYe5S9tbTfAOkgz2s=&c=CYwp8dtcJv7OnTdPz0q21o9Ini1gUObSpgUFvYNrXCcoNDYcr95fP5sysfVvNZ9O3AEYDpDMSaIY8UZC9dSxgd4dDhx/.../j9exIDELrh6c0L8G6g5umU&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=VBYwBZUzskDXAElRfCttic31AnaeKLGcZ6Q7xwKXVuw=&c=jXqkU1O0jKOIX48Ff4P8AI7cC2k4zmLJUjp5dWc23Mf7yADAvRz0mcjqDJ7902zlmi8bBW244atcskDmfHLvl3lMMFm2omcyGOKbNkg0aTclUEM8TDAuqzR6xiqXd//Y&downloadAs=Google Chrome.exe

http://www.cdnfilesandstorage2.com/c?x=RL3lhfgLjBpEfzZMV qn0No0/7i72YlKuWU80bysMJQ=&c=W/nWSO4Kno3Fc/.../BFiVgeGwiusHTDJx6ep0capkOUC9RDhJxqsb3Wid2hd j0Kgs3JJz6Sgu&downloadAs=Google Chrome.exe

http://www.cdnfilesandstorage2.com/c?x=y2 xXCwFhtgW secBRK6uX5OSjBv1Ef/NbxdTWkByyA=&c=oT0lOCq1NqogevmxNqxIU0lAt2txmCgRgsDMKT3fG4n0lFyndZBea1BQQBjmqf/xZBJYd5mqhB1ErbYm36tl/.../xE1KDlRWlNcuAC25efEzeNGABieFVQMHBAa8S6i1&downloadAs=Google Chrome.exe

http://www.giftcapitalgrab.com/.../VlHPDUCoKGOzAmj5bI5EI&downloadAs=Google Chrome.exe

http://www.giftcapitalgrab.com/c?x=qJIKx/awfaQg6UfxlWU2ovHbB6WoWVbsqW2eYUPAIpI=&c=Mz1pXGzoPii6uDYy3CNrF5CSxr9gHoFdJysBZ8ZT25wFzsfWmPIBHzZal/.../Qi3SwTqWJwyc0WKI8mtesVuVyLCzVB5ns gxivWp9&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=Vnlv2aa06MKv3K/XeDXpFvGzh1k9a7UkzgKczKizC6w=&c=C7ExjnkVSpUvJkPo1YfxlHtr7wOoJ9e1xV x qSxiSQRWTs4fCZAvbVmbGLWDNMb9 UvY/.../Ky0ZdQ ZM9HJRVWCeyf4qAlk7rL4&downloadAs=Google Chrome.exe

http://www.giftcapitalgrab.com/c?x=eeZvpKX3ajAKtsIJwR6zfMDhNo9ys2UlMBMn3OmKP2M=&c=LCSc7JK5 2uNKP5rdfpcqVbIESXaSMALybJcMffNBop1agK5UoQKqy5ZvDD84yr3GwHq FXmJfmKoUbIWl7RuvjqRRAE78c6NG8W2gI0LCZo8Lhca92oqix6xaYGFKNv&downloadAs=Google Chrome.exe

http://www.giftcapitalgrab.com/c?x=xryqXi1ZvfsFC1Jbo8g28y6SjzQ8BbH/.../hVmTAvruNKLZflJmauoRtg8slH2vGRWNrP9PSDZiK1 bfXzuaLtWKvUGOz&downloadAs=Google Chrome.exe

http://www.hostsendpackage.com/c?x=of3AV59F2Nxd9rVgq0x82yYNExMUJhPQwDDCc6 x/Xk=&c=gvAKOVjl0AvYpGs3l1RljPZSAp60/.../DaNiYvmkKmVH9H7&downloadAs=Google Chrome.exe

http://www.giftcapitalgrab.com/c?x=ai8aE08mGqba7MW2XcjW1p5QLPhgdmRBl4v8swclPj0=&c=3mhMU8x4bmWvSKVbR4fflf AQ8r6 Zs3XypdYVgwJnpXQKOo8b9VW68DQByDhaSS 22qbEmVWfFCWig4ShsH3wdHnEKaA/.../9 jw4aOvYzxpc8gpx4oVGGpzD&downloadAs=Google Chrome.exe

http://www.giftcapitalgrab.com/c?x=WmIWyeR2YWAYf/.../zsPY66rth7bDmpT95IcOHDXL0KzAMyK514PtTehGanhC98SGQY85EDDssQ9woPgv5XkSs0&downloadAs=Google Chrome.exe

http://www.giftcapitalgrab.com/c?x=dv9vYml7vXbXrvvgz KehpRp 4BuvcvFiEJAGWuOrB0=&c=vg4ZzryrRc5Sn4O74JQn8cIWA242AqlWig8v3RZPVJ MT5KdRm29vcKwQIBgiZTk9LrTiu cO6cr5nl1g7A3bzxbJ5ow27cA8sYvCDyFvVTHCFug3zykAebysPNWv1r2&downloadAs=Google Chrome.exe

Latest 30 of 233 download URLs

Remove google chrome.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.