home

googlechromesetup.exe

Internet

Installer

The application googlechromesetup.exe, “Internet Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from www.inventorfilesdelivery.com and multiple other hosts.
Publisher:
Installer

Product:
Internet

Description:
Internet Setup

Version:
3.6.4.2

MD5:
66eda422935fcc4f91cdb6c0980d23b8

SHA-1:
29d8c7b0ea0a5e4386f6185fd5c00de6866d6905

SHA-256:
21e8166c8756a6f25317434221aa738356b55c98b3fee41d47364d477e4360dc

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/6/2024 12:44:14 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore (M)
16.1.4.16

File size:
877.3 KB (898,372 bytes)

Product version:
4.2

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\googlechromesetup.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:8e9gQDn9qA/ELFjXCrf9HAtjgti3cmV+pQ+JbNJi:8w1Dn91EJ7CrOdeGcQc3i

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file googlechromesetup.exe has been seen being distributed by the following 12 URLs.

http://www.inventorfilesdelivery.com/c?x=KHeBVsMwWvu2Dq8kQs/mAhzpq3xltbV5 1Gn22DpXRE=&c=WfisXX1qHxccGGa5 xE/eNQrA0SZLph2HkVfPqqsnd981DWB81ZUtJKNuoUjcGKsUmtLJRIpBIVDDT ayGzWeXaoDi12wxgXX 2 Q14kxwUQWGRf hZ8uK728MKimSDN7q0M qOcTEyhgYKu3zyszQ==&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b

http://www.inventorfilesdelivery.com/c?x= NZBvrN1x8AWS3pwIN u3zIDdF77OQlcNfUNC5 DJTQ=&c=W0uCfpcEETL6Zp2/Q7 Od77VkAJqqiu45jyJb28ynk248stXor1Gi HpI8XSQ9ORYl DVRX2BglANDnspbUafvV/pDdofqJX11g6VPaBYXRrAelE55aRSneu6dWQeosnXHJgSKBhOViGIfqTFyWSYg==&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b

http://www.inventorfilesdelivery.com/c?x=rBAqPtQfx0KglKIs42MOlykdL51Ve0z8Ld88C/XViTo=&c=/af/7DcTEp5lWu4WQq uVNkWHRFmx8Sy8swlaLw/mF6oOIuqRjdFfIhLXrW/3r/W9w1a0DvXNvjZvysRsjYs3HIyun2aYv9ympepUkSAk y3opGd4SF03e9ogqZ7Xcw&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b

http://www.inventorfilesdelivery.com/c?x=iR7QRm8rFqLSkYpqvVpuno2tsB48H0tYfacenfBdtQg=&c=Ui5dTpj/EEXuN7aixvCa8Bf m r w HWv/JJWB6XQd/apAhsNOQZ4EnPEzy/cMDFqaJ5VNor2zJTtR/EhhO834OFH tGNlE7eRD7aQ/r2BGte/ kFkUzbGg4tKe VSLpPlWPfMHMU4QTr7DcCPUntg==&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b

http://www.inventorfilesdelivery.com/c?x=dZoGiwsult3pPdXQFW23rP/kfq6aHZniPLOxMucLPf0=&c=tADKTaqCY0BW7qQGN ChpBAn29HfYNuUb8Nhc4D9qA6ARwblDxtIkKrLKThrefxMXjHFsDje84x6wFTwGopv1LvN0zVN0Dj/OEYp7Vx5S0zrXj8okUFlB1dHa9iMiGkO9aNEE jngIU3la7HLf2DcA==&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b

http://www.inventorfilesdelivery.com/c?x=12VULJsdvky8ouuj1MbJOcNCuiSrC3RsHgmiqFsuH5M=&c=/YxzBGtO9OJkl09m6rJzDACymWi0xxKTHQgVysjBq5OmIAg9nXHL1b9CJaimQlg8Y3 y6i8R7zp8qkzNaDoCzRqrYGuNr9f l7SS1F8TlzdOV5NCVjitXAvb ESLXym/mI0Sr/DtYCUGcSK3w2ewXw==&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b

http://www.inventorfilesdelivery.com/c?x=lBLrlGx8474BGE9cwdiJRmz1W0L9jRyopTGhpA7w/uI=&c=uVWDiy3 k fXDVMg8Fc 6IXSuOkW9Y5ck3ZrFw4ursLLQhm4uuluNrd0hg6XLHnYlAkn917DHh5LM4KxQmuJ/8iJ7KpjQ9tElibiHdup46narq/ 8euFoB6OX7n62hNHF7QqQfK6ERTtNxq9cKSudQ==&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b

http://www.inventorfilesdelivery.com/c?x=UHvovWwybObmBKNqS0f03Zjf0zunA9XTDCjXA7OPcpw=&c=iWxqF39SHku yB0TuR2ntGAcoYZTrxS0bRDo7tNP83 iIvwzE29HhZUm4uG5RUhxkYv8 DrhG0 KKftgjboAeb0MkQSYT68xLoDyeiFIajqfHZjcT8RECtwU/xg7oeRCaJ3GE9MBvwjNTSCpGsXLnQ==&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b

http://www.inventorfilesdelivery.com/c?x=aGXE7//71RUrU0fcBGDt5NHY71xabj2IAWLryxhIHH4=&c=neUTATcR0q1XrS xofqNFY1dZaeDH9ka2nM/shK01jbEnfWE9kbVeBJmygfSStL6ecMEzsW5CIw/SKkEd mNG5xS3mVGCL3CjS4SiMNgTGnFp6HAeML78YI h6fnC9sAk/BrkKQH9jkFLZUQ20i5Nw==&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b

http://www.inventorfilesdelivery.com/c?x=T0dn697ooja0VXWFMPQmzfBHuUkFNREJ5aU i9VIw 0=&c=Y UwLVh73XrImAGDnsly4rUq8nnr HZdstCxkBXhDXyk4ckGB0tOg 2BmjlCuBmc1D rkw0aXQNaTXZ5/A usdTeEZ2A6/Kd0zm2knRBWOwk/8cGCswrmd4UAH4G4z6x66Bp/gvgaoztBtHqKGvEog==&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b

http://www.inventorfilesdelivery.com/c?x=BsMfXeMYvEfRVzYTr2JRc6BH4qQFEbN7qpfA6LYtE9E=&c=fw JUmoxfo2NgI5oNmOfxkuANsPXp35ljLo22NX0Mr/uIjiQGaPj5ww6Kb6Tr4JFfnBnOSYwUvGmKsYjlv2nTW RHP8ROh6RdmGenawtV DjbvARivAwDwsNXRQximTz3QzVv4DLyX7zOsEu10lqgQ==&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b

http://www.tourstocksoftware.com/c?x=Gy8sZplV3Lc b12jrkvpWQ2ugHxcxd7C2VAA9xNs6zo=&c=l ppJ7jvtymubXsUCjU8tT19zvxZbJtt pTu/7JJCpMM7WTgPO0nSqK PnzUFpUqD2Pq1qC85l8tp2zkvtUF6js8J7Whb8qSc9TFZWITC yXCcIti1BZi36Sk0lxbR/R&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b

Remove googlechromesetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.