home

google_chrome_setup.exe

Lepabocuhe

Superb Alpha (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application google_chrome_setup.exe, “Lepabocuhe Setup ” by Superb Alpha (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as Google's Chrome web browser but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Lifope   (signed by Superb Alpha (Fried Cookie Ltd.))

Product:
Lepabocuhe

Description:
Lepabocuhe Setup

MD5:
2a1bd64158dc5c24cf34d8dc2753ee3b

SHA-1:
bfb42ff897d01f112bc75085bf35867d117f561f

SHA-256:
9657020f8ec482a3e73a26ccbb1597b4574aaef8b092c6f54546d8f0589485e6

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/27/2024 10:38:58 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.23.13

File size:
1.1 MB (1,114,160 bytes)

Product version:
5.7.7

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\google_chrome_setup.exe

Digital Signature
Signed by:
Superb Alpha (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 5:30:57 PM

Valid to:
6/22/2016 8:18:43 PM

Subject:
CN=Superb Alpha (Fried Cookie Ltd.), O=Superb Alpha (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11217F30BAAF40AF8D13BE6DB4153600593E

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:C2KFgeCz+fqwhZBYfH7NLRsksYTqFTG+hsazNvFsms9s:CrmHzDwhZAZLdCTGisazNvFsz9s

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.8763

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file google_chrome_setup.exe has been seen being distributed by the following 50 URLs.

http://www.contentranchbundles.com/c?x=SCYoK5E2Vglues/0VIpp3MZw0gn5M3gN24HDRfoUyxI=&c=jOTHIVl3KZymRZzho 3YwxyWJL4m2Yo2HDG/vvB/hj8qsI/QeZpQYqYqvT8l8HWFNPVNUIFhplsM59O5u6QhaZSoY4emk MDgRCbZXIPvrHLw6HnvJDDZhLCXR2WbTD1&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.contentranchbundles.com/c?x=dEUV2NL3YezxLr2Z4XP7Mcm9APKb/P6GPy8Sc6VESlM=&c=5v8AkVSWE 6r VokQ5kBBB4uO/9wecxLcAzvRysQx7BvY3fD9Kyat4bRstEyEHphXWNC1VklYrbAK7DU3Ai7n 2U90RjqIJJdZ6ZUouYR2w9a hQlXNBlR7P MVYnI0O&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.clearsoftwarenow.com/c?x=RKJ4h/iU/YN05W/5rYODkPZAx5yq5RrFCN1tWc7o5IE=&c=2pFbijFM7WO7f8Xx7xgCLqVLoIjujuD1s5 ENP7xJ71P5h5SI OnqkB0Gz /6mNB5ozf7se80kqWj2R8AazNZFuexWUJ/jPoAf1dw/bQPzi/j5YGJgkm/yUTLwxZSsqP&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.contentranchbundles.com/c?x=5eG5lUtIprcAzwT4VzwT53XcVDHNQ5qBOf3xHDb7lIE=&c=rcYIIlX2k0/kXICexJgy6NhxLzKrczhvDXKzycF2O2Nrdfa3PxJB o4rjuAKTWjc/RaLjLXBxs54lcp/mh0AeCKZaOt2feVOo3QqkTHtaBhpoiWBqiIRGmG3hFI9SH9M&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.contentranchbundles.com/c?x=FYPKPxzVRxUeD0XnsviYzn10PF9V9atRtYQctHt7T78=&c=dBx8XYBOsb Lb zAufUHYsPpCTslRjm2dZioSG7LPJS/2lr7LppChwHkXtLayaH6TEChzNoa qY FpYZJThroePzJUA/TzgvlBLjQ9rh1duzGVflsmdJMrs2OOIHTy0y&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.clearsoftwarenow.com/c?x=ZvNEjSDX9YfbcXzNTGj7chBRTLL9eW9aX1zDrOqW/7o=&c=AmT5daGoWdUCv5ecBZ3zOnjWHFmfBz0VFwifzDVJYxW1BgPS9qDEmJ4lTLZ8L87ta6jPrYc0i5SLRMqXJKkVrrJvKxkOUBU/iDM3iBSmrGwey3XruEq 7p7SBpOj7fmH&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.clearsoftwarenow.com/c?x=joUIZiBrKmVolQhxEKN46sL4SryLPDjp0N7ycWG9Uss=&c=V0gCohZflD5EhoDeI1uBYqbq6OHcQ/rlsOi dNbk56br6cVpwNOM95LiE1CiSHSFX/1Fl3jJRp3K8k5ez/U976hPEsL2dNMvTVCMWRNWAVE2W7aOJkPLfX1MzvxmgXnN&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.laboratoryuniversegift.com/c?x=F/dO1stdGGO d8psiLKs7RlKWYscuPXGBFGsgbVD9Vc=&c=n2n4BqYmVXgOafEkbOD8qW/ePdPl4ThtaAIj2PerpoYpV/jAr/6HyqcAy3LUYb9rsXhGc4VzqrrhDgj8WRRkWCoSJR/Nblt37RcC/m0xqbGu3f2kPcau77eQvdsoDn5I&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.appmegapresent.com/c?x=v5DJFx5u5zTWY 6bavZHx5u1wOV2seWfhbVwpfmF5c8=&c=nxLOgOD1kOEnRDFLdmBiuLhd1N32AXFEJXp4lRcZXtrTJJH99qT 5zY4Ujq6xDUoH2WspU4IAzD5ywuBlUViBsM2cI2AOzALDlk 8uEcJO4V99aM2KBN8KawOTK4ajIw&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.clearsoftwarenow.com/c?x=fZzZcI1oG4ifTqxADWSK/kSxLvHs2LhpFKPMvZaNrAk=&c=oj8ddPzy37ksOXZzl1cdayeM3jnJL7LPtCtRua4ZqGRNtQchG9 3KoiyNhUNFjtYT2POCdKGxfN7nmORihWL0H 9hWVkn96lrM165IL4y7YjWRNKtPX5BBU1plMd7I8E&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.contentranchbundles.com/c?x=fTFYZ7oy3PpJByFBmx24wDk1BbQZn26B4TV52T3ENTo=&c=QppwI5gXI/6OD/zLnnQ1AEAbrDbFsHHu e2C7Izpp4zX C1qO493o1XQb2GJn5g9Lx1yPxkbPL1NGbJ7efHoz/AQJvsEZaYlAYNb3iTe3Hzm83LWCigQSV5/R21uCC96&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.clearsoftwarenow.com/c?x=I3NdTAly5i7icVpd0x5fvYio2uPtp97qKqFkX/zvp9U=&c=s301HUWKw2WJ RJDI33Uylzn/tAJvyIdajDUbDUjpHsG9iabGjD3cofurbRksQF925ZWmtUd1y1V6PctDEdZFOFz9ro9/HIzy9ffVk8uqxdGobzbPMWVKxUFgCgIZuNX&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.clearsoftwarenow.com/c?x=3EKHpooKZSZLPtwTKzovTpFHpVMKqbHRju9nXQsWnh0=&c=BEznRE3n7Fx9yyHtJXk1E UJtvKsdg1Nk9oYNJMGh U21zvsL5Ypg7Hj0oe39Oa4oGRlfw0YgdVmYuc9JDcIqzRoxNlLVzA2y9wHQ 7tlqbUNZMMt27K8PMb6TZZTSZ0&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.flashuniverseranch.com/c?x=PfHnWv4nc0c8kgmnNwO8r7JfEDUkkVQIYg Z5Uk6xjA=&c= qS2viQ/L9qK0R7AT/q 3Z6 F O5mYbhHOnEOtroq1e8gH2qHFwm2o0CXk4HKX9GZT7sCwvKIQ38uklFl xSkbSIoCuKYZVzuwC9QRV6LVnytVyBMzWbYFK6kByZJfMP&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.flashuniverseranch.com/c?x=T5zvaQSk5rfKfEF1KDNu 5Ttydzz/Qn2TityWdF5Uvg=&c=QUQ3YJubVJT6DsunRU7SJTJR1P21mKf3IonOENGDNOefczgwIpRxnFHN6Cl1l/z2LHmCXejgQZXbxGVvjUPWOZuN667H4TWdbqALRjYGpN9IdvMhWnmPPQzXDbws4GrM&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.contentranchbundles.com/c?x=L TrC6sMM9X89KbKQg4rwap5HWZ0y9sEUdrhaNCCBgY=&c=UmDAJ wFpsPcXV 6Y6PjAS9GIrCXlFTZQZN B8SLcjSg5de2VUBSCxkSDHVTLf10JbKi0bs/w0nPiCGtlQfdPaNEsp rn6yGKM6UzCnYDeU8e026mVurl3JqCRpxzrj6&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.clearsoftwarenow.com/c?x=6SuUVtD4NjHFuqGutAo6bOM/nHCM/ICC4E336mfHBpo=&c=fpeABWzXq3Gkz7YbJcFypOnS4f48x7qKFBoMnU6H2vYIALOYWbzVdsMW609XrNcz4cE6arlUf5PgswLYLVdwk 8BOqMCTiwFhhvgBiTx/ntI3zb4s6If0ylIvxv/5Dmh&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.clearsoftwarenow.com/c?x=gt29WjTn809jATa3Jkr0FZF0DmkGjV sz/byDzkODMQ=&c=1m9Wqr9bjvvXNE8CWJKKdyYGd/1sOA6UohgAOvlV1Zt2VAAniIaP4jsm0K8z4vJUL09zDLC/ZGyfO2Tnc6lJWPcaUvQ 4I2GSiyaQD2/K7/l4ZoWkO8C8zKf5H1iprpW&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.clearsoftwarenow.com/c?x=/DburdrZBgGUEMrE3jz/lC1nP tiAx9p Q5QCu3KryY=&c=cqzM9jj8Z8q5obeSDRu2Pq1LU6d6KqVPxaIZJ 2d7bcpzVnO PhPzHV1ERJ8Cp785mdPmSWIEiuuQgzsRA sBASnbDNnTHaPHs36moQiGGVFYFUHblYbsnKPiUX3UimI&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.contentranchbundles.com/c?x=ocXJo6QbytLbQPI8YiCx6T4Qac9CIXKS6TmjXNf6esk=&c=J 4sffP8pa9hS9B5EMSm7MDXnFE6uo1MtK0JGw81yJkZBFgvAkrQLpVqFmJPXQIosQpBPxhpd4505kF/hOxUv9MHWDb6sprveagHTusdOnNqXgkC0N fsvM8Hn0thnoM&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.appmegapresent.com/c?x=dXzO5w3/7pWNwYTVyOi6adW4W/2E8MThYJGm/z8RqWs=&c=la3aMimkJUCiJqcXPtvhurrQGxJU2I7FYLAsyXgrA0FQx3jB6dcZ7RMx/L08MLXKrIQjEzyEtg x aL4DwTyXllaPzjP6dzpYRTSTzi3r8Ue530GVyn9relxe8YFsOGL&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.contentranchbundles.com/c?x=Sr4LJnSV5ZeWtiUA2RaQae/SOZpHjCWHPPbOmswp gU=&c=5DO2brDGMEBFqoANMELn9FtxkvRgfrOw qbaScVIkb3BR5zoT DXfYBIgMLH80A9qg87zkJ5P38k qplyYCG3AJtIHQ3F95qJ6Z/l8TUuYFmPQXqp81HtyOfAESAm0wy&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.clearsoftwarenow.com/c?x=Rc4nBqELsRhy/Q0ElcwGv6emA/RREE3 ydGzNw/va0c=&c=FcXJfKHIRFI34/fEHBjjjI5yuAJmJHXUhSHmzGJvhvq5vteI9Qt0DFJePH47kxN/jAGq4sfnnrZZbvzcVmwm8QjV0RgvNlHOneDWDYhZb2Wz5Vyfbkq1 6rNV 87GEpn&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.contentranchbundles.com/c?x=vnrvKXsJzphbhe1ldL0iYcgNEHYV4J3Qk5lwuAw21DU=&c=CprMnS7rGbGWNooKsuXsa8iHdUDmhb1Dk5US gBOOngmp6SMZk7M0pOywz5TNukLPGuGarOSNp/k0dfZMUH4LKGOy87RfZXEFFSn3FkZma31jA7WL27b4DC3Hr0BaHdB&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.laboratoryuniversegift.com/c?x=yiv2pP/PPxHkGgVWbGf6HkofV0Ba1D8nSj61XswAqm0=&c=ouDl7PMk6NOVWErdNlMAejl fN1UQMIiF9AXnfg8bVCzGPt7ZOlpasYWbrPNQTsfqd7Su8/kqBmHRW I5JMWhhzqqeqorUE7giG4cGCrAZOjWp/s6HcU/dvlTelgq9Ru&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.flashuniverseranch.com/c?x=sXJIpWjpATX1HkQHcaC6/Fo1x3PuwHsGH3pODOU7KCE=&c=YUKtT5LAth5afUHOCm4rS9 HG LaMLknZ3qGsw/zJNsvmDV4je5QdCzkBvGTip8iQbYfoifNd 72Hcs8G9Zi moqGcDffW602lwJPl1rbnV4/kxBk8TpcmNFUsCj1KlX&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.bitssoftwaretag.com/c?x=akVij 5odPMCDkHRuQ0MQrakD4ctAi9GPVs8qd2I 1c=&c=LSULicGRLrDRvDQBTX3mD9NvTIyjyBi6Scp98j/a1inVQOQAdTxpPp5nposn0iLiRNHlt30MCwsxvg 5zFkdJF0dOLrc69G2eZ6PyRg0aH7hRYKTbK4oq2pTLJsrJcpV&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.clearsoftwarenow.com/c?x=N04i3t3mXF/cjAy0j1o E3bei0NMwbRZ8GMudxqt7HE=&c=SX5bL6AvE6MKi6H0jsCFARg kTjrxKGdbJYNEvf9PpAMyWrGOSY8TudIRVni0rO0bnb8FQIuALZwhrNSx3VD4Y0dFKnkfgqhtmWw3DaRgrVq xQ/jyzYQXm3rYO72h5p&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.appmegapresent.com/c?x=JIQwp3hOL3ivvM7P8qBiKA50sSOqBOK7i0czxOF/h A=&c=j4wwI2BYf602B4BFl0OAVkuFgt90cC7J6v3AX45luuxlJnJ 8HibNEGcHyn94R6smljrlydr5XvR4IJ3xlnm0CyN1mjvWrOwYR4nzavWmny7qSwFv/wshnKJ288N0wmw&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.laboratoryuniversegift.com/c?x=OWNdLYspLCrS/y FVUEhOK4WyG0HwQCroi7hc3hClmM=&c=k2QzxMOnoW1/Q 5vW0g41Q5geaAX6w7zlREameFT1j7ulcbLIN06ZrJbAR3yH89BoFk4N XU27IIC5OTdeziS LZIzTjciMTWPa3ak6ukhQxI2eQQElWV6er0gO2op i&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

Latest 30 of 67 download URLs

Remove google_chrome_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.