home

google_chrome_setup.exe

Bifehagun

Superb Alpha (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application google_chrome_setup.exe, “Bifehagun Setup ” by Superb Alpha (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as Google's Chrome web browser but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Superb Alpha (Fried Cookie Ltd.)  (signed and verified)

Product:
Bifehagun

Description:
Bifehagun Setup

MD5:
36dd6fde8bab05b45f4611f07a7e5bba

SHA-1:
20c3b446815947fede332299507ea7fc617aeb44

SHA-256:
cb221397dfb3523d277d51af7f21017f31329467953f7163c058a33ea7ae8da1

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/27/2024 6:36:15 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.2.28.9

File size:
1.1 MB (1,113,528 bytes)

Product version:
1.0

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\google_chrome_setup.exe

Digital Signature
Signed by:
Superb Alpha (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 5:30:57 PM

Valid to:
6/22/2016 8:18:43 PM

Subject:
CN=Superb Alpha (Fried Cookie Ltd.), O=Superb Alpha (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11217F30BAAF40AF8D13BE6DB4153600593E

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:QhIuQ9ZwNVVlpqBT+SRUU7VYDW9VbQAnTkFGBOaGv6Tc:Qhv8Zwpja+SRZ7VYSVbQcTkFGBOam6

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.8741

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file google_chrome_setup.exe has been seen being distributed by the following 28 URLs.

http://www.centerconecptlaboratory.com/c?x=PR6NvF2vaWmkzXq45kFHhTmxgr4xfFAK4Cs/zwee2go=&c=f3SuKwNViYhDj9TNlW6 BVmccGbVMaT4J6 xF /DeAOWONt5yMGaD2Gk1e9WgFyJ20cXvMxpvt3eAekX3HFdMa2Bs1lTBr/nqjFVXeo1S4S0n5SCeRdwnqI9AdT38 XC&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=phTacP2LkPY8uKCDfAx5Qi AewKNaQDVUaeNzPeIcIk=&c=BPilWUYr0zL M2JDLarhUUF4J5RtyEKFxxbTPXxVPNqh MdiylWCwybps5WKWWSdOU4CmvMXC2ppRUxYKFCfqzqDQbA7L4T4zalqb/ XXxL39IUeMSZaht4ccHQkzIeW&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=wvIpC40/ezxy40TrhY16uwAqj5FxOO0W1hvLt9jGFI8=&c=FwSje9VvKLmyuR 7P1Li8MpUmty2p2Etz5vZw46uVZY1a6q0HpBh6P6liso7t e9deZuvl3w DDo5DSODhIkjywCjxF3EeI X9Glvg3paLG5UaV8ki972fuThvsr4W2s&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=INwddBX6be2i20s7vp5oThPczEW7XO3ycBoRp0UUJH0=&c=NUGSjSwH0gG3zoB8ZeKkwLI6lfDm50kwgvEGEBiJRDsJeDNQJBVitfZt4cXm9V0ZnYkyyd2jZn3QEAk4kKpD3T22xysU3nufpylKRN7FsBwOipvZCyn1JJBOpAU4prWY&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=tMz x4tPeXmRKgkf13hCfIkzLeeW9HFxQYXgsD5Z Do=&c=er/eiIiJM2Q1Sp9 eSV5oCn774timPGyDSRSTGtjZe00EMM3t33NEccSfn1lgtiZEGYrYDeQopSpJQfBkyrz5d7ROb5ohzz6V2k8a7RHkPxOPvXihfcAmrSEcf2idYwe&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=UY D1Stvjnof1CacB30wiImSHEpaXA2WUAACVd/NORE=&c=F06QoTSg37aUTGuQTqQnp0xz18rIKFf2ykxVngsc6KHrneBj1KkS4PXZZDf0KafeKrKYGEy8XUpH8KaF366 zMPy78jZFZCzfcMI7zKDAcbX/fSI5epeixCJ4RqIpzNY&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.appmegapresent.com/c?x=iH ExH72IzGb Qy3ZwiuXiiURL5tx3 HbUWXuvRP0Wo=&c=ONOuecHC2Gr5cCO4gGzh/e2JYWgAmDHQvdEjlesg8cakVoaamfDTExcoDYnekjLGiOo/GU8Mt7LCRoeLMQtLUrPs9d/qMM/xmZUAee3jI2OmHFR haoCt0NTxcez9qxE&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=AnmRbNmV4qGsSmwBzEWd4qKKbppPyrBkjZ0pa4FW00o=&c=ZQbWqbFiJZRYFBL4LIORmEN7u8c6n5XJiIl IhtLvzsPiO5lIcz0KvQGZox8C43BX71JvU/uaux1McVNSYOLFQE3VugtWpHPrxwLQkZbLCR6TfZe4u2Q/7y994Ns8ukh&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.appmegapresent.com/c?x=RvxMVT1EqHCTGspPBrTil7m07r/jvL9brzd/TaQ6xHo=&c=D9tlMbnsSAzBO7VlmCWFYyf2Co0z/Ek9B3g2oT5xKxY560o8j9kelJ9hjTvSq11cERmdUpw19uEb8mMTX XrrzasB Hy7WdbwUChvY5Ownpi2SMsywAK25og4vngb5Fc&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=/uDNjzn8jupKyEcR3x7d8tWAbSMXb2bSxxMZBya SEY=&c=LNc20JJGvnTuvWbJLNZrEcvf48obkJcqe13a5RCIZ2mSZsrLiG5sloYAXAAmEW/oKEbOya26H3uyVLrhvbx4TWDNVkT6nRjCmJlta ElR7QpeW4YB8RiL6yrEzpKWE4K&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=pUjPa19mh7nb88GkJIRkA2dtjJmmgKCTYwKV8/MWoNM=&c=sBMaPh WasyoGlzDza XHTdXvQ5lVWBbkXmL42m109Gs6zpBB6hOOPr0Pt6Tw/DqpeGXUVoAvl2Q1RyOooXaVOYoEzIc7b8Pf4Bdr5ERHwSOrPgcNTtjjtbiGMJqzXO0&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.appmegapresent.com/c?x=8LS4AP5R1CW7qQF0hHLMTvpBS3SqMU ZsniUKwJiZ20=&c=NZIw7Hmi FWs46sPmBUpvl7BVpOfEUjHxT1FMCDVMmnmMcYaAuoS91PmyLUN8eJNSbvOapAcZXGzCkujMTripHV tYbQVnUx n4rlC1LVAmsnxJ7akSbVb0WND0ZyG6o&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=bVlmauhkfo29N330Cno6cWtHojv3Env5dI3nwQRcyEE=&c=9/z6NovnHBhm7BIhps979HN85CwwTCjsbJu85eDTX2l0YrxSabwXzr5Wlhe4mle ei9v22PdLthcXZ/Qg1huRZF/5BPDuwwQEM6i blZdyHQq7bSCRCGdFI92K3hZy/w&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=zUEjmGq7L5YSIyh xEq4U1Xla/4W3jML3l1tMBCdI4k=&c=snC/Am6PBxDHbTt t0IcBW02mxD/wiUfbKU2AqOvJQE2b0kGRdNH3tl9Z8WOcGpP8LGn sr7UCFS/oNHgoGc aPRREj2z82hsMtzIqoiXScaA/ThVNWwWAySZtf6su5Z&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=a qDU z XyP4OvH1q4raSjFSbXckTCRvSaVfIWG JSg=&c=hpDznEufT8J uRiTF64p34YZCkpGBWeG7H9vrpPS6GI2RGS73fD1D9nrT4o49QC9Ohf6BxfZMND377UwwSzHw0hbRwVJfEyIzXW1q3Fq4XmFsQw5lFo9dKKvYc8FUeC &downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=TRTpJjkV52yoej3yKq7Mby02x4hzElpya36sB2pV/sY=&c=L9jznJy3eOHC7UMsgPKpn7Lrdwdos60a8JVQZK1kVx1uAC0aBEPxZuruSMV8/HcfetdUH xIj9Zd88YnTis3WVd4BRaEKFSZMGKweJBX94Q3rHkOl6Jxo9Ct3dOvrU2v&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.appmegapresent.com/c?x=V4zqTyOli0XcZXL8uGJL zWb8cKFzexcMB7b1yF8uz0=&c=sx/atWAaGL Kk4PHIFEoy8zRTrnjSGi LAhs5T6w0BCEfPj/8K86K0A6kCQ00OoQ2w7GpqlNcpapLQKeGdVchIMIpODCZLjt/Z7kSC wcwHG363RxIunWcUN S37AnLf&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=7D9K5jcm1sxSzullwUNU42iwoe6hIb9HCrKgIMAug8Q=&c=qwe04PZyfQE8C0LHrJhnxspkJjbGemi4b1HL6kYsVQmCa7TC9fdTJfqwXURTF5W3RI/ML8hei bGF/pMKX2RCV24iVqhyde/o19n P7jW/IJbGfXzvRC rMDsmNflwxo&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=dchSbS1kDtyHhKN5Sg/exd1msC9SQIaKkLCkyXlZyis=&c=UdcfehCMW3piAYwjREKm2czxVKDHVx/ACIEZNbziwVCq1zI9hXKldquKjkDtBp0OL 2X9hzDd0KvojLHpFHKo3hdebOIr9w06in9jEbADVFNnhjS/g4wzkALHVlhrqAO&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=yceUJt8BBVyzIV6L7T7b1XhxWEDBWR/Kj/91IcjTdow=&c=ozbK1M22Eh24bzY2yU7jSB99GLKLLdCwyogPMsUtc/B1pLKQqPHmrX8Rtiv6nAUq5F AzCXLtvXQiTUbOsLVBFGyL7kjtc1G2cl5rDECMclhhDDVtwjYPMt5LfA7lhiv&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.appmegapresent.com/c?x=CGmU/PtdE04h7Z0cMlJupa hWuwNi6MKe6CgJrUvsMA=&c=VLvyFE6fgostglxUQ/VhZYPZuDyVmQgkULNYLITSpCpUDaXfsQq31IiazsK0jAUA4Pitm489oXx1emdpM jC5u2inEszSb6j6U2tFj3EXKi1SfpxQguSuq8I6ZIyJ8G &downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=OXErY7Y7cnnSoxxBxIsV3cljVNaz0MaCjt10vL8WSKc=&c=m pAMR S8t174d4roN1SqC83cw90 6sy8ofaUw6FTQ4GQRXmgEEZ/3I3b/rjmmFE1bZn7yncDzQt6gkBc47ciiSwgOYwR2EgCdqghqAnRByIfbwDb iSbFL ZAK87T54&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=OSwnlbtb0tTrC7cDpHzlaY9Iq7urqLEhaWZW0wVUgew=&c=M4r9CrYjy4X7nev8lFOC9SJVQxl1P/7V SlPp6 x7S/wQcAol3IKytnP1vF y2AJxCqrFV65D6Zu0j0asGePIyu9MUVvqrleNcH4csPB6i9Yir/ 1yDW1bQ37sVKNPPw&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=Hb0RpjgqlzLSpAl9nvOCD 8MDOl51RR8eANaMbJ6zR0=&c=nkZETXxJOFRqzSpX36Y67pPNYPvyBqQ97aUk2H8fpUzBp1OzK2cOyEuaJkgpMt stEN4efSylOD9kEZqECncgUrxl1/iysRb9aADk6iQpJeDqJeUkwlYhYa0Pr3oud8K&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=vNfotGeHZk zm1YtS0QaHkyLaIkBpw9FYQQHZYs2fqk=&c=q01Z8QzKb1FaMEngt5vtE9bI3FJXm/w4nZVpCYom6yLdd3J0dzEkpLfeHM3k028ZXgbA/YqsIR0VJAT8z75AEqp5WHENYdO1JjdxMuZLshzsVQkWKaBs8UeEBn5KYqmB&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=KRtTW/VpSGNk 6Jtdcz5yb 2hegfWDZSJHGMdUfn eg=&c=HG7E6dhEI4cdjz XTUuYHkqNxlnBDc/nNqFUsikEJTpsVfFCD0fiB1uNH9E Vm8cg9DFXmUPe3NVgNQEw205asaAOfsjPqUQO6 H66REDMrPhth2F4c//e46NAlgk /P&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.centerconecptlaboratory.com/c?x=040CyGZhyDWsokCuXP8h0slP26VRDwDPaZDjxHtzuWQ=&c=Ej5iu0DK6QKTgmopwcrJjH5T6K//l9gHZI7PGnc8Mw41Jm4oLmUOc9I64bgCpTnneT65IrAT5lsU X8J7YCMx6U0IecCL8pAP4Sw6d1CvwxmgJ iPncuw5r6ksjUUuwz&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.appmegapresent.com/c?x= cflelwkbQLwsQUpNLNp7isMuKU9yEATq c8dEQJOrk=&c=wkvwXsPuG8M1xZ9L6meGAh5C2DGOiZ04VP4P4aeHppeLTgUYXRLEyKKmWqge3sW3h7QCMO/BQnGDULEtvzux2s26bGReWlCM5DP FOcXWopnc4A6oUWqBGnHdlD5Z 5f&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

Remove google_chrome_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.