home

googletoolbarinstaller_en32_signed.exe

Google Toolbar for Internet Explorer

Google Inc

This is a self-extracting archive and installer. The file has been seen being downloaded from dl-ssl.google.com.
Publisher:
Google Inc.  (signed by Google Inc)

Product:
Google Toolbar for Internet Explorer

Description:
Google Toolbar Installer

Version:
6, 6, 1409, 1944

MD5:
90316b0b316434f93a2b0c21be6e7c08

SHA-1:
c463bd77d337915a650c9353b1f9479a3b8e7dbd

SHA-256:
2cfc17545d54ec51e35daf956c4562c27801ee041620b341ef8a1f8c93ad5f4c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/20/2024 12:43:33 AM UTC  (today)

File size:
2.2 MB (2,314,472 bytes)

Product version:
6, 6, 1409, 1944

Copyright:
Copyright © 2000-2011

Original file name:
GoogleToolbarInstaller.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\googletoolbarinstaller_en32_signed.exe

Digital Signature
Signed by:
Google Inc

Authority:
VeriSign, Inc.

Valid from:
2/22/2010 1:00:00 AM

Valid to:
2/23/2012 12:59:59 AM

Subject:
CN=Google Inc, OU=Digital ID Class 3 - Java Object Signing, O=Google Inc, L=Mountain View, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
36B8DA6BF00D94F158301001ADD6527F

File PE Metadata
Compilation timestamp:
2/9/2011 9:00:28 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:4uSbRpmwbvIYOo3N8iH3MwBD0PgHwulzKCM5PoslcI1:4uMNbv/L3N8iVD0P0wulzMosl

Entry address:
0x32109

Entry point:
B8, 8C, C4, C6, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 98, 2F, D6, E1, 4F, 7A, E5, 26, AB, 55, 5B, 47, 6B, 62, B2, 3E, 74, 35, 7A, F4, 82, 67, FE, C8, 25, 4B, AB, 4A, EA, FE, 00, 44, 61, 31, 74, B7, 9D, 29, 69, E6, D6, F7, 54, 96, E1, 3D, C6, 2C, 09, 83, 79, 51, 19, 88, 70, 8F, E4, 37, C5, C2, FA, D6, 0A, FA, 0F, 4B, C2, 6A, 61, CF, 19, 44, B1, 94, ED, 0B, 34, E5, 55, 7C, 64, 36, 3C, 18, AD, FA, C5, B5, 09, 67, BB, 4C, CB...
 
[+]

Packer / compiler:
PECompact v2

Code size:
283 KB (289,792 bytes)

The file googletoolbarinstaller_en32_signed.exe has been seen being distributed by the following URL.

https://dl-ssl.google.com/tag/s/e=asknot&expon=HTOL&l=es&d=set&h=set&r=GGHP/toolbar/T6/data/.../GoogleToolbarInstaller_en32_signed.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.