File verdict·Decided by the MT AI Engine
Our call

Safe

Official Google Chrome installer signed by Google LLC; tier-1 engines clean; no malicious behaviour detected.

Verified · Google LLC
Trust score88High trust
MT AI confidence · 92%
ChromeSetup.exe
11.2 MB
342f04ddbfda14e104916f78e723
Antivirus engines
0 of 75 flagged
Code signing
Signed by Google LLC
Age
First-seen today
MT AI Engine · our arbiter

The verdict, reasoned out.

Not a rules engine. The MT AI Engine reads every signal we collected, weighs them against history, and commits to an answer.

92%Confidence
Very high
Reasoning

The file exhibits the classic profile of a benign signed commercial installer: verified Google LLC signature on our trusted-publisher list, zero tier-1 malicious detections across 57 reporting engines, and no runtime or reputation red flags. The filename 'ChromeSetup.exe' is the canonical Google Chrome installer, not a spoofed security tool. The 'filename_security_software' heuristic that fired is an overly broad match on legitimate software. Rare-new prevalence is expected for a freshly released installer. No sandbox data, no malicious contacted hosts, no dropped children, and no external-intelligence hits (CIRCL, MalwareBazaar, YARAify all negative) further confirm benign status.

Key signals · 5

Each signal cites a concrete token from the evidence the arbiter saw — engine name, MITRE technique, signer string, or an exact count.

  1. tier1Malicious=0; 11 tier-1 engines (Avira, DrWeb, Emsisoft, ESET-NOD32, F-Secure, Fortinet, GData, Kaspersky, BitDefender, AVG, Avast) reported clean or timeout

  2. signing.verified=true, trustedPublisher.matched=true for 'Google LLC' — official Google certificate

  3. Filename 'ChromeSetup.exe' is the canonical Google Chrome installer; looksLikeSecuritySoftware heuristic is a false positive on legitimate software

  4. prevalence.classification='rare_new' is expected for a fresh release; no malicious prevalence or reputation signals

  5. No sandbox malicious verdicts, no malicious contacted hosts, no dropped children, no external-intel hits (CIRCL, MalwareBazaar, YARAify all negative)

Points in its favour
  • Signed by Google LLC (verified, trusted publisher)
  • 11 tier-1 engines reported clean or timed out; zero malicious detections
  • Official Chrome installer filename and structure
  • No malicious sandbox verdicts, no malicious host contacts, no dropped children
  • No external-intelligence corroboration (CIRCL, MalwareBazaar, YARAify all negative)
What to do

This file is safe. It is the official Google Chrome installer signed by Google LLC with no malicious detections or behaviour. You may download and install it without concern.

No researcher-database hits
External threat-intel sources were not collected for this scan.
Antivirus engine breakdown

0 detections across 75 engines

0 malicious0 suspicious75 clean
Tier-117 engines
0flag
Top commercial AVs (low FP rate)
Tier-238 engines
0flag
Mainstream engines with mixed FP rates
Low-trust20 engines
0flag
Heuristic / generic-AI engines (high FP rate)
All 75 engines report this file as clean.
Hash 342f04ddbfda… cross-referenced against 75 AV engines via our AV network.
PE forensics

Section entropy & packers

Section-level entropy and packer detection from the PE header. Nothing suspicious here — entropy is within the normal range for unpacked code.

ent 5.32Unpacked
Section entropy9 sections
.text
6.70
.rdata
6.08
.data
3.72
.fptable
0.00
.tls
0.38
CPADinfo
0.12
malloc_h
5.40
.rsrc
6.76
.reloc
6.74
0.0Packed threshold 7.28.0
Prevalence

How often this file shows up in the wild

Barely seen in the wild and first surfaced recently. This is the footprint of targeted malware the AV industry hasn't signatured yet — extra scrutiny is warranted.

Rare & new
Unique uploaders
1
Very few people have ever uploaded this — rare.
Total submissions
1
Includes repeat uploads by the same source.
First seen by VT
0d ago
Jun 8, 2026
Prevalence quadrant
here
Rare · New
Targeted malware lives here
Common · New
Just-released software
Rare · Old
Niche or internal tooling
Common · Old
Trusted legitimate binaries
File identity

Forensic fingerprint

File biography
First seen (VT)
6/8/2026, 2:48:02 PM
First seen (MalwareBazaar)
Last analysis (VT)
6/8/2026, 2:48:02 PM
Scanned here
6/8/2026, 2:53:10 PM
File name
ChromeSetup.exe
Size
11.24 MB
MIME type
application/x-msdownload
Detected type
Win32 EXE
SHA-256
342f04ddbfda14e1047d64ba0502a13d69007085365fd33898c711916f78e723
MD5
b6fccee09aed66d2a820dfced845e95c
SHA-1
55e25916ebca6f28a30438e185920bc036a03e7a
PE imphash
51deed3ee18551d2ef0717bc13c25239
First seen (VT)
6/8/2026, 2:48:02 PM
Last analysis (VT)
6/8/2026, 2:48:02 PM
First scan (MalwareTips)
6/8/2026, 2:49:01 PM
Last scan (MalwareTips)
6/8/2026, 2:53:10 PM
Code signer
Google LLCverified
Behavior tags
signedoverlaypeexe
Community classification

Reviews & malware reports(0)

Tell the community what you saw. Tag the sample — Trojan, Adware, False Positive — and share what the file did on your system. Your report helps confirm or dispute the AV verdict.

Loading…
Loading reports…
Scanned by
JackStaff
Files are processed in a streaming pass-through — MalwareTips never stores the binary on its servers. Only the scan result (hash, detections, verdict) is retained so the next person who scans the same file gets an instant answer. If you ran this file on your computer and are worried, scan your system with an up-to-date antivirus and change critical passwords from a different device.