home

chrome_update.exe

TODO:

Verified Setup

This is the InstallMetrix bundle installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application chrome_update.exe by Verified Setup has been detected as adware by 16 anti-malware scanners. The program is a setup application that uses the InstallMetrix Software installer. The installer is marketed through download protals and search ads as Google's Chrome web browser but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
TODO: <Company name>  (signed by Verified Setup)

Product:
TODO: <Product name>

Description:
Chrome_Update

Version:
1.0.0.1

MD5:
81e8eae3d706ca8483d16e9c0b1d3377

SHA-1:
e5f10ed9b3738aabb310fdad257295d8d8453ebe

SHA-256:
3482f1b0ccc01f0af182440ff8b49796d62caa5b78272cfadcd329b0c9ad3550

Scanner detections:
16 / 68

Status:
Adware

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
4/24/2024 5:34:20 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
PUA.InstallMetrix
7.1.1

Avira AntiVirus
Adware/AgentCV.2066560.13
7.11.180.144

avast!
Win32:Adware-gen [Adw]
2014.9-141030

AVG
Win.Threat.Medium
2014.0.4189

Clam AntiVirus
Win.Adware.Installmonster-9
0.98/21411

Dr.Web
Trojan.Domaiq.7
9.0.1.0304

ESET NOD32
Win32/AdWare.InstallMetrix
8.10537

F-Prot
W32/A-5b646058
v6.4.7.1.166

IKARUS anti.virus
PUA.InstallMetrix
t3scan.1.7.8.0

K7 AntiVirus
Adware
13.185.13853

Kaspersky
not-a-virus:AdWare.Win32.InstallMonster
14.0.0.3021

NANO AntiVirus
Riskware.Win32.InstallMonster.dgppyq
0.28.2.62841

Reason Heuristics
PUP.VerifiedSetup.N
14.10.30.20

Vba32 AntiVirus
AdWare.InstallMonster
3.12.26.3

VIPRE Antivirus
Threat.5063683
33706

Zillya! Antivirus
Adware.InstallMonster.Win32.32
2.0.0.1964

File size:
2 MB (2,066,048 bytes)

Product version:
1.0.0.1

Copyright:
Copyright (C) 2014

Original file name:
Installer.exe

File type:
Executable application (Win32 EXE)

Bundler/Installer:
InstallMetrix Software

Language:
English (United States)

Common path:
C:\users\{user}\downloads\chrome_update.exe

Digital Signature
Signed by:
Verified Setup

Authority:
COMODO CA Limited

Valid from:
8/18/2014 7:00:00 PM

Valid to:
8/19/2015 6:59:59 PM

Subject:
CN=Verified Setup, O=Verified Setup, STREET="660 4th Street, Suite #427", L=San Francisco, S=California, PostalCode=94107, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00F60AADAAF866F752AE9DB242F68CDFF0

File PE Metadata
Compilation timestamp:
8/25/2014 11:23:12 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:mxwKBmF54Fm3uTeLMBW1wZvMxPcOe5HFA:mx9+5Km3RwZEiOe5S

Entry address:
0x1719

Entry point:
E8, 31, 14, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 38, 9C, 40, 00, 89, 0D, 34, 9C, 40, 00, 89, 15, 30, 9C, 40, 00, 89, 1D, 2C, 9C, 40, 00, 89, 35, 28, 9C, 40, 00, 89, 3D, 24, 9C, 40, 00, 66, 8C, 15, 50, 9C, 40, 00, 66, 8C, 0D, 44, 9C, 40, 00, 66, 8C, 1D, 20, 9C, 40, 00, 66, 8C, 05, 1C, 9C, 40, 00, 66, 8C, 25, 18, 9C, 40, 00, 66, 8C, 2D, 14, 9C, 40, 00, 9C, 8F, 05, 48, 9C, 40, 00, 8B, 45, 00, A3, 3C, 9C, 40, 00, 8B, 45, 04, A3, 40, 9C, 40, 00, 8D, 45, 08, A3, 4C, 9C, 40...
 
[+]

Entropy:
7.7845  (probably packed)

Code size:
18 KB (18,432 bytes)

Remove chrome_update.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.