home

google chrome 48.0.2564.exe

Lositog

Platform Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application google chrome 48.0.2564.exe, “Lositog Setup ” by Platform Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. With this installer, users are expecting to download Google's Chrome web browser but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Sofog   (signed by Platform Beta (Fried Cookie Ltd))

Product:
Lositog

Description:
Lositog Setup

MD5:
fdfc1ac3b2d6dcff37bf55fb3402def5

SHA-1:
9efdd6910c4c70a73474964f8f33af2d5165e7ed

SHA-256:
caf746582ffef97bbcb43a65bc84bd543d4a86dd03f680390cefa10a79f66f10

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
12/28/2025 4:24:46 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.23.21

File size:
1.1 MB (1,122,456 bytes)

Product version:
5.5

Copyright:
Software Web

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\google chrome 48.0.2564.exe

Digital Signature
Signed by:
Platform Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:41:12 PM

Valid to:
7/7/2016 5:55:56 PM

Subject:
CN=Platform Beta (Fried Cookie Ltd), O=Platform Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121C446C50C8915C47DFD619121C2806B7E

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:elLbhUIbi9g4RbjQ8uPkr7mQ9CbTicrjANztXn+U0MCY01Vii4GoZ0tt:eR7bb4RbjQ8H39Cb1ANzd+gCV1Viie

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file google chrome 48.0.2564.exe has been seen being distributed by the following 10 URLs.

http://www.signtowntoday.com/c?x=DhVsZp0rD8g0Zoh6/6xHiOvw8Vog gYotB1ThQhaHG8=&c=eBJ9KbfYPogFqH4AWRefdhh8ckeHvW/m0kfzqHKbHOnCRB4n6vlI1URBrERpmmBmyUMsu/hYlSXtBbKqfrvIWahU5erKm BDb6RSlLylA00L7ge1FGbiJ8aeQDDq1kgz&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.signingidomain.com/c?x=y5mNrWGcOXA9ezfkXDaZ05ylOGW7oe18RmUrIO8ioNg=&c=qCN/nkLgro/JIQNQMTL8zEYIsZGq/vbarw9n6hjzIJLBy1upvh03xdqRSrYo3OWbY3CQ8 6EUWsznXtT4FAoMJBXVWnhqVpRFhMDJA9vGv3WmSNytjxqzdbqrvWDXFME&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.signtowntoday.com/c?x=Hf1MMAABPkS3uqM3WgHwWmChynrQuDYgqsVwXz7T6FY=&c=Ddtd255FTFsBdKy3xdi/dkWYJDVHbtpaB4UtEUFxSna81QYwrYzDI/FqXtEOTVVxiTI aI eqZTf4OzrL10k9I 5DjvQ/JjxL h0nqzDk2qeIAIy52Da/5zpatzMnWvV&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.signtowntoday.com/c?x=yYWQ0FFs5OJ40L3IZPta5sfZ6IYQRJojJfugXWZyhGI=&c=IPK L90fOwWsP/2 6zZme ei5IWYRnbY0J6 tZs0r2j2Bfj1G7EPoNzTUJx N007 JorfmxbyKV efDuD8o91ohLQPqWxur2gUANT7XTyUX q8S0TK1QqYvKRxFgoC7 &fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.signtowntoday.com/c?x=d5z3djEA0j6LF1OdEVh7nocFPpttgx7xNLimKXNK/m8=&c=lo5x0oK4fTzmTvtr3CaFlsZCpKqggh4Vzbcer0JYyzprhqwZkqk/CO4KpFTiZ/AULYf5pMiCSkyX/LXm9rNlGI96skPlTLDyFpSx2Cvr4y m1gPFKn/0hR2bJ6yfsnL4&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.signtowntoday.com/c?x=cPvd5kALdgMzfCFF1TOTGlS2RSn1HhCa3mxoWO5YBIk=&c=bJTlnll5MPH5oOvq7QsWaT/pJ8Ej88KBgiLb0swbpDukKBeqB7EuAgTAC1b7rWquncczslh4RQ7s qvOxrmnBH8fR4QoCaTBbWxZuOxr35Oc/KDBQ/eboXGgVxWiqqUU&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.signingidomain.com/c?x=e5Dpt806ozv9yMPyiuOFpmcqvZy8ucw0aoMjtonvH5k=&c=3g651AAndRi0XNXKkREN1mVFywa1iLxpPLmJJcxdsP9QcGL1kkw35TLEPfaVpF2B0MgL5JrSIIEUFp227AR/zPtlE6mzOLSXiVlJBSANLyUdDScFCQkOAWynrdk1ILfi&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.signingidomain.com/c?x=Ij0D7rrlfUIzFQAFLYT7AVbJ3t3V9mMWFw9f71MeuB8=&c=NelfERtU8E/D6lMS/Zt3ShCX1GP942iIxOhzPQ4cnVSqU9 ueLGxvyTIlpdHyU7pPtKnd2lMAVFavs1lhccW3s4LA1IoSvb9lxwTnhQfIKQwtIGgvPHud9FnkP9wAabK&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.signtowntoday.com/c?x=oB71uslQaxmXUw4T8R3p9XKlRZ8lC2nzABbkmgsGoZ4=&c=XcLzia5DD935425C6HPLmBQt0cKpWkceyawZ44ZSzNy9kA4dtcgpY04Erg zMvEGSOtKELPbJ2G2YpxAa6goxtbI3W2PFa3eVRiKWWdjTaS0AgbyZJj33s2Fowgzt6EK&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.signingidomain.com/c?x=HTRJHFmscLDXDDYOGj4Zr/bSx4vSOHgsBL0pxvHd6hE=&c=ToBSMfN/uo/TlAxhtInWS9T709YV3CJWQAQVF3vw1/Y7xWKP1sMRR1MwIkEZGkvqB 8NDRZilvYg8fwZLIDqxdanTfig8H6gTeGo7D5cQjhfJ7 wR1ksoChv 6yDm1HT&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

Remove google chrome 48.0.2564.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.