home

google chrome setup.exe

Ladah

Superb Alpha (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application google chrome setup.exe, “Ladah Setup ” by Superb Alpha (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. With this installer, users are expecting to download Google's Chrome web browser but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Superb Alpha (Fried Cookie Ltd.)  (signed and verified)

Product:
Ladah

Description:
Ladah Setup

Version:
5.1.3.1

MD5:
81e9f4ebdf0ba15fdba525c8d67276ef

SHA-1:
0df2cb4746b69ede6a0c54353d68cf06cb89ad17

SHA-256:
71cba1ef6b3a99a655d94028c3b764864462c08397c3db11e8f43d24276e709d

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/28/2024 6:52:55 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.18.12

File size:
1.1 MB (1,113,480 bytes)

Product version:
5.7

Copyright:
Web Lite Program

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\google chrome setup.exe

Digital Signature
Signed by:
Superb Alpha (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 5:30:57 PM

Valid to:
6/22/2016 8:18:43 PM

Subject:
CN=Superb Alpha (Fried Cookie Ltd.), O=Superb Alpha (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11217F30BAAF40AF8D13BE6DB4153600593E

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:LL0BH/iwl6SeF+TJusDI0NPFJ/cj3hxO/QM:LQdiwllTQsDfPF1O3hxmP

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.8771

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file google chrome setup.exe has been seen being distributed by the following 25 URLs.

http://www.appsgiftgrab.com/c?x=3vIbo6jqBSTzMlZO0OBEDO/Nr/n MxOB1yGkMDfX2M=&c=BnF2Z1FkyZUJMJYhOgRcOpAVnTLyLj441oiozmoRm6HHrXhqfo093SuaKU/70sLt9h4o0CDOijWsPpmDznAq5A8zvf pkfCEuT OWcKAolTynLi/L4/mi9w26cDwaUl2&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.citybestbody.com/c?x=tbX CJgMARhWyAXRUijwMZtOiMlFWOGhMsa ywV8dgw=&c=63ztBrtqC bGHEA7d/WhCbtQUCnjaPFvTKsszIhrhxtTMUmq1UC82q5pQSQBxDMaHXxpKvqS3kZ35JWJeE5tqsxTwjeeL24UIC2NB2cQZ5K6Zdnw3wqWsTbC3Zq U/6R&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.citybestbody.com/c?x=ZRM2LH65VV7Sg6Y2KzlU/GSQRSJVhkIxv WhVLLhLv0=&c=PYZ2ai64N815nXkRkks OyPZex93IYb0M25bOGkuwOff2UrpfUHd2j2W5KNQavkiZjkmG2mE9xTCojscQRQZKSnbwPZqxStRq6iGKck2Lj8nAuCnrRBFme7WD 2r a5l&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.townrepositorybundle.com/c?x=bLvwwhSyyo8Fb0DriunGSUF92Ih7RLT1rOCNyOnRfa0=&c=FjGDeNOzn83NLjoGRvglNj48WEx5oTgCRN8TuSnWjXlgPcXINonNWaQ6ziYdyd69NEGKmi993Id06iFS/xp1qMYryTCPMaIDrhK7wjoCAzlku8o0oYfiy1nHuGR3FC5c&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.appsgiftgrab.com/c?x=9D07kHAF/EoRU3sfzUoxDJtas188LdlaQbco1Yi4nYI=&c=J5VFDtg7JHV dPjggAkySlJayLvknoK ZvxmhtaTQ9X8momB6xq13jtXkugKlArD59W8mdlm8QAAyX NtCnayHqNFnxNyEl8WWs9UYI5xL0lbElJK2MMTkUqq0PiHYsL&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.currentbinariescurrent.com/c?x=pLZj zGTm2SNUfS5Su5R3kkSi6KEMmiu5NHuX5ey6QA=&c=WQpMLzJiKtcMsdYZerwglTbfhLj 4UohBFdmtmYi2lBlShvnf/pNHOzn/DtEZ5COhbdncE71P DK7BAKQ1/JMZW6p783E0dX2H3Llxoz8c9ZvJ9a7/uDMks019ctotrZ&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.citybestbody.com/c?x=of EJDmL5dh/sWe/hiBEsdsPXcgbww4y6xTe2Twu4ZM=&c=haIZwhbkyNiRQGuAZ0/F5KBTTb0mIkZ78Ic0og61YRR 2NO6QBuypApv8N3V9aqBRGIFNVmQR5YyQCy 4NQyNDIVZDxIDbLipYA0O3S2rDnfk0HF1DXQaeeS0Ljk3xCU&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.appsgiftgrab.com/c?x=g5WXk1N/AifN7en0vqMtrwHysqZUrb5Y8EwlKFx2DO8=&c=PIPwXRh5IldVbdVhMzHDmUW1W8PXcDrRuKUL9Z9Tnwr5d5CB8lWeP0NaH773lOYjdNd71Ye0hBHqQdfGWAEuRj81ZedHw IIzuEWAQXZpYpO7el6jaYFzy2N9xuz zs2&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.townrepositorybundle.com/c?x=JqWeB3Vpc3b9RApSiYamXDgKwrpgRtZcT2q HdKktQ8=&c=R/GWdeTx7V5dFurqUwioZAfw9P2k8C q9q6m7pGcNTkUhkk3A3RfxgRwg5a4WmCBtntAOHkJ91Fmr6KrUxqTEGPbaYIRcPDnCGFMQQzgwHCyxb5ECyPeBy/kfJkyv iO&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.currentbinariescurrent.com/c?x=462D17pBMvSQQuTeW2qrUZY JZpJt0xVxs4DgSf6ZIE=&c=QUDloTWFXu4SeK4UkPu cIEzM70wKh8/U3VjCZQjWhoF9bZa8sH1ch6KSqWZVi6c597cWhRdBoh5fAnN3MCn2x5wY0fHm5 Ke0Gbs1YDphprdTTBGB7tR1rNqavmj3uV&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.appsgiftgrab.com/c?x=bvulxe84ya//t J/kJ4wUeYHyhaHFj7HNYEqytZvpIM=&c=DZVXq8Xl D/FLnp1S9br4oMb2DxZEusNy6d5Jg3hlp3Z1bIjUvl/Pvn/hkfaFdH8BWltrxu/qcnk VFOJeriKvmoE63ZJFDE1IvWrMT2a3Ipxwc9bSMj18Clpn6t J2L&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.currentbinariescurrent.com/c?x=oH8JFf0V8j0FC6F4UKt9UN6lCNuVyFhfUljb alsG1M=&c=d51Y26L22SSuPsZk6yJ16KOvjZlwmsw0JYmLpksf6Cx4WjN2RlBxS0vlWgt4LrqOGz3 DXPKgluds0AhoIjxy6Af5vfEk9pcamK5qNdldqNgBs0kN wZPmHfI/ JsATs&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.townrepositorybundle.com/c?x=NJ7wslD09LqLrpjw85xSWoul9wVUui/JQ9pUc0KCi18=&c=s 6GCX6DsNEUDrxIMl mKV2hM4dWhnf7vDEkC2 i4sx6k6k5Ls7tKfCDaGDMi8YYem67lCozSzLDGczMIWvRfVqOXKJRUMMrV1h8XwJF4WXxRmZU5SZXqAC0/EtqvzcU&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.citybestbody.com/c?x=7PZfnZ5lcb9yfLyPmVOWWm7qHKcpgL4pP8pa8GrVMQI=&c=GYHMe6KuQL LV/LsC2UTzVUpo6OL7cuxS1Nzgf7o1d2hFudtScMQCFrMpljR4Bp1lwsnf LN3CV2Ducxf9d9N/GCLR/lU1XQkMfCm8cwJEvufFz5qJVy3Fx9sg53iHPW&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.citybestbody.com/c?x=4C1nDkX54LqKutGHg43SivQnfl51FYAdWTkM ezBXI4=&c=jSAYRexQ80nco1xvW4ETolxPTpK2wczc1XUTMIuARrqxGllkRni8GgT8 aGjUPsHaPQHwUEZ3wfsvmPyjXaXZ80gjnqRt7sChK9fVdP/3FjZkbw7AimowK 23GYklAl6&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.citybestbody.com/c?x=ZRvKflTMXjbwGzM9t/OmFeDA 3TukZSMVW68Id1EIzg=&c= 8svGed9mgieGPw4IWgTHS3GGlmyeI yLeIeX/hCbCQDvEXEAoqVIouQwDXHao0eRVRqs0dY9hg94n17DGCJhk4Mi IT5ymW2rRyPyyiHEXH1ao5Abkq2lkf/lpkTZ5E&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.townrepositorybundle.com/c?x=GTydVo77sJG9EOh7xoYYJuOW99/LFHCfubanXBAnUAA=&c=ljwyJLuG/VZJzBEaeZgz7LHp yYvZophCn7AZZeEExVlyxVUUO3n ClT4zrpFoIbncF3l 9/ADUjQY4Hs1UYvuh0WPwaoina1Zwxk4U6V8Cs3BQ6yKzhVHAyI/WdnoCd&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.townrepositorybundle.com/c?x=tGC4x1ZyPa0xKdmOdFdZX74ucjlLDD10SFKMmkl4wyM=&c=cjikurCB/Amh6nlKfW3SWDro7RO7fhzWgp70IgFzEusbFtrwAulVl/e2j1W5d7HR9BGPEYDjqNddEAizBl9e122tP741OhG7fxgMxkGkjEGQZD0l8e3 GpodhXXeGC3M&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.currentbinariescurrent.com/c?x=/E3AvhuwVo07tD6l14K7foijETGEn8wfA7a9Two6Ls8=&c=5uwEq2rh4c5ih9SdckviXXMFieEskZXB3vULHzS lCwWT/WWP89PQ9vCYCcrdO3SD7 HkMalX hUmQyI3i6d25w8Z19zyUI5gSOFwPZenGIgz7YEg5JNSxHWg/pCrwTL&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.currentbinariescurrent.com/c?x=Vp0cfKBROgpaeAR2ymqAbNXojqBlzhLvXjaeRJoE8Ko=&c=aMPN8EgRluH9wu3jf8vqKOi05ChuKCIjtcDIF6k mcVXs/iJA/phu9mgmB7N16HgLYwz3vieRY2UxcBPtYI1dxiYFJqjI9ysx55c9dL9vbePzJ5xfyejuISWRJeaiFjD&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.citybestbody.com/c?x=jx2Z4CfiM0xE2BYvyV27pZG2QFrdMUIlsJVcKophTJs=&c=r3VXavLBHock51MQNlknew3tGA5MZCs9xAclR0aZmeXfI1YES0OPjMdQSGyO7WH1bgDnx7fSob8yprmTYMUGZgPJvVK1vb3H1MH1sOTWyNAi4XH95gfxfJ89tabbKPsN&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.currentbinariescurrent.com/c?x=MZ/QeGXmWcfWOOEe4Rvu29Kcr36/eaISXp39 5lZR7Y=&c=nR6TJpSQoKKR857vQeQldcXAAI1FCUN3/ 3DJsHGF4mhIRjehFv3UQUoccSAoQqECYtwdrkqlCITwCKdqgx8j6Xw/vEK1zL7B5/dBho2A8fT3f9G507IFwn Z3wafu4V&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.currentbinariescurrent.com/c?x=nOIv6pBxQ4bYUenP/Z/pM fQuLal55LiKwIFE3A4pfU=&c=3XImBVLjS08FwtJ2b0w0o2p/DHf1k5YTxwAoWvKEVSF4DaKmZbhuyG9h 6oq rvXhgrmqdBbQ8cP pwbS6gMoCqEV TJQK5Y0qCQl3rqTN uCYYx4W4zeQyq0XtTHMqA&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.citybestbody.com/c?x=rCnAgXFrreMhC4ETxt2VyciWPzTN/RP3/ 6/n1rZ bM=&c=tbAOI2O/Z1GuMNV9xRi/cy5tsY0hJHAJg/hcPjoDfqWmtuOmg7DKXB/tPZ8m0 b6S3LAjMCuQeTh2a0VU9qjmkrVmXoDf03lsIKNHEtrZGLbZcPX6xQ1qdRMpHEjHXYH&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.appsgiftgrab.com/c?x=1q03YWF5VK1m8CUj7FqDl83mETEpOefr3ors4X/Kt7A=&c=2TJsA93T8qG28rZdIKIoNuK Z/yp3YO2MtUQlQl5Gi4okcW5/IYLxnltqZRggQ6cyQU m5bBqAxZvyQlHKU0wosroAhIORcJWKekLQKvxnije65VzZ1fVzXS9YGov RF&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

Remove google chrome setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.