home

google chrome 48.0.2564.exe

App

Platform Beta (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application google chrome 48.0.2564.exe, “App Setup ” by Platform Beta (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. With this installer, users are expecting to download Google's Chrome web browser but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Software Lite   (signed by Platform Beta (Fried Cookie Ltd))

Product:
App

Description:
App Setup

Version:
4.8.2.3

MD5:
2f14cd01527be382e58854b816a35318

SHA-1:
183f240e4803ea48ef655ca28f8b848296955f5a

SHA-256:
d8f9eac142e84151bad465226f8b4a27ac4e48b49f1524735a3058fb1fd6c51c

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/15/2024 10:21:32 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.5.15

File size:
980.6 KB (1,004,160 bytes)

Product version:
2.6

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Digital Signature
Signed by:
Platform Beta (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 2:41:12 PM

Valid to:
7/7/2016 5:55:56 PM

Subject:
CN=Platform Beta (Fried Cookie Ltd), O=Platform Beta (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121C446C50C8915C47DFD619121C2806B7E

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:YbQCQ5wyt+G3zJpYxe2k2SorL5Bw72HhwX2qIZE4A9:Ycr5wyDYx2POM7zIeD9

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file google chrome 48.0.2564.exe has been seen being distributed by the following 21 URLs.

http://www.newbytecycle.com/c?x=kPfcM5U6ckOT5N37f1P9FFANi 7e3HrDUOlnFI AXLQ=&c=56ydl1GjDHh8akcNqAHAKWlTvKSQG91WdVHXZp4y7v kApCWQ9bhIpth 1/fxQ1TympBcS4Y5oK3oXCdaohKqWsLDZDe90BcKP/U60wC5v7qtD9kGWQnDxtB KGOOEGL&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.signingidomain.com/c?x=kg3DB0YklmH4BBXD/h57/AhJK2Vlok2dggmNYcEBacw=&c=e LaotLqkVIviEMN hv40QGS bocRVs2eDS7CCXXEWxBpHCfnLtPWVS1oOknIc 6SoKWADp/It5ZEXftvEKO/S/3PoJmpmldTX5aMqoLg9urOXZ0u2HjWhV1UKN1rSmp&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.giftuniversegrab.com/c?x=enVvTOgQcosYkQ/ZBVbDbGZeaoqsv5bOwQikSzvRUPs=&c=FemJ2kQt ceDWeul2YjsLorv14uWRvw6PjQzowcIEVo6Tm8k0mop2lNlljTNI9fOY/nPsqWMmGFb7hGxvio5yttfJk50YMyzpvm4bbCKvLw6EGcAmZKxSBYZDTjvwR5I&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.megasharetowers.com/c?x=QKzym02zYQGBMwmBWt4HFc1/UeuzwQ17TVSY fhmbQU=&c=shSu FPcurPzSHpSX/HVkoIf0h7lXd7myoSMAMLPeiI7xWarmlWyG WoyfWquAjFywnRife4baqoclYRo0rKFQTz3mtGa55akgZ7Z7KgE8bbS5t1FUWnydryG3Ms1Y3G&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.megasharetowers.com/c?x=IqHRnthmUp5LMBNRWNTWvE56CUDBUZrr/MHAeG5tE8g=&c=dn9ZCfo4qAYmHOeRqbJ eTX pNuIthgxYgfFakDZYt7hOSO7BIvs9STaQARZlTjg KRJKpCaSoOD16 otJefNwe xazVrcKGkgBMAATy1tTnaLKiEP7lWd9ey5K39dUK&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.sendcurrentapp.com/c?x=3WiRzDNbc9Deamc5eoAZvqplN4dgev kmrApVfRFikY=&c=7kE5GMgD1gTV1kRghjHRq8mUcncI9PlDngBhVais2KAgCTrkKJIOCylQbqf2/XvM89wyiEZvZ GQfqaoot6nc0rbjZQZniDN7nkgoL711IA1O/oEWg7RanNi/BOE/Mif&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.signingidomain.com/c?x=AMY4YNJKaE7B3N1rseV4cnE1xWj5hT6GCb0yDll/0MQ=&c=tAXSI8LDXviC80Zg0wTxStudzgXZpUJNJ8s2btQusLhaH njCYv/p5tDYW5FOGgsGgkqpY7E25XptCCut 5yZwRfIijGS3gSc8YSei1 2xYujXUv1DbZ gkNajLKGkQI&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.quickquickhosthostonctnent.com/c?x=shPx510Y/GhDZvavFAtTPprBC01UBgSrIKOkyyG qBI=&c=dhwpGI5/A/oPB7wemHFCnNG1t3Mk3svZ0oLv8LyQL7FSjDlZi6vmtq8h23HZe3GQ24WR7tWe4qx2wLpmlOm7f8FObMykxlIVq57HafiqJ91AnvjYgQn3WCLKsO8JWjfn&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.quickquickhosthostonctnent.com/c?x=HIN96ETRht54KBYX5z6tZJkax4ZvhbxQJXz0h4RXTGI=&c=Kl/y2P/6EUUb6ZAuOCY1Nd1/yb8kbmGh5N7tVs3W1hLjfIPvLTKfBYd0BL8aui3J3Edld80uZQ9XINVRjA50rjX0//18kBMoxmogLFtAfBNQxvE9lVGSOvVoks5Vo/S/&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.quickquickhosthostonctnent.com/c?x=t 08oSmLddt9L2RC1vO2zYJXL8RYXj/5AyslK8eAaQs=&c=kVpJzzaPLmIrFwntXL0ssLRftSTjFzwE0vMHpVXeELfrEgLkFeLNFvp4KdQfATrs0DVw9BVOrZPP/E1P78pFdcg4NG3BHJ8Gstj7z0adYh7O0gOY NQ4yehHK2HbyKnf&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.bestappshead.com/c?x=iMT/pUwZW9hb9duAJnziC3Ez3T7I1ICmCAtfKEzBukA=&c=M5joXrvuBJhP8nCZ/mth5z9mOctrknmFmzybDrI/nkvaicBIj1ypvAcMoDQqDQ/GjrcIKiNFuWpGB1eAXv8Ql707zg7ERhsam7Y9azDVD 3I7i3BpSk 0SgFMksOIBpp&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.giftuniversegrab.com/c?x=tJEKdq/nz61b6/heV y8xM6nP4khmPR6FytN0Duw9IY=&c=ojnua/Kla6/OAk44ZQOsh1pg98s10Th0Yw83lzDW4aM8ef65twkT35sa1pRGwsv1/F1opuAMnLpXa9lP6Aa3yYUX25cWURWr9HJsvDXfk8bX85asZzdqYjAfziODsoHY&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.megasharetowers.com/c?x=u7M/Vhs8PBpz4xWaBn8Tfuj6WijbJwwPqzF2dLWOKwA=&c=knuCAIG8OPf/omEfxgFQRYe/Q3IKLC 3lKcT0GAfARGi vg08JmBJvjR5OZIhqLIKsljC4R8C5eAH8 u39PGnJB8Nt69FcLu1l0VSP7aLpu/NwapZ8Mfq9ldRQZo5jRl&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.centralcyclebody.com/c?x=eP5NO4yh9okiMzR4xz4tHnHzVXbCzLpRCQlxSH1E3yw=&c=UDtixyB fDC1j7k8Q2C5QhgLWlg2NqtKuGJEv9uNmijCG VsyLqHzzSInciEMubtiGWn1nS5pDfAHRHv2hZ0lxusY84lJ7QXszaWBqGd0BiwfPgpKmTqOLqkP5ZbNl40&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.megasharetowers.com/c?x=67dd d 1pCEWy1hJQxuqJyGnp5oW55LKOL7AuLnqzn4=&c=w5hirS8eSDOyLgNtoySGqR3au9P5xO93MTSoDqBMSqCsDT6gXQkdw8J7Go3DNnUFSGg1VLo/RwlwOu6cLrcJdncepAvEkWa6d4rg96bPM9U7NdX0iEuYgCxEEXjMg4m1&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.bestappshead.com/c?x=4UhLsdaPzA62EXnTG9p4c4LyFrw/cpt6sHo9NgHAq9M=&c=s58Qa1vWVuzZ2Vb07yJ/Du6YhlaF9qUusi4lZM1AZwte3SO5Gw35QbxJJn3bWu XgWtaUvwDP7ijgOkC7AorsV8 0BtSlyDsiTZPZExVPsOZL8m44UfnTWD0Tk6w6l1D&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.centralcyclebody.com/c?x=NBYy0RCSMGRARFV/fcXD/FoOPzW1kOfoHp7ukvjpiGI=&c=vnSIBzQuBOM61vIKodNmunRyAJP a5WuxQ96oBHpJR7rWBnlGgZnoMPxgTdu0nwEdQUNsB2mzig7 Qzvy8ORLXEFrIQfipZ8XGF u3ODbrONhMSJ 92UR/wWcYOdTvZE&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.centralcyclebody.com/c?x=Q6Y8SX1MSlEEf7rEy6SZ6zw4J2qIq2KVyZZEn7actVo=&c=2Ayq3UsIPt39tqizqdywujQPEquzVCWJZdxDz8ZOXB4GGHf294Y95zqsmhl6O XkzTIeJTo6uPeZJTwikSbV5mMhTQWp9Qc5VlbnwpnNGLJqiaGpPOcVaQK7Pkpn/YNR&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.sendcurrentapp.com/c?x=5019pjuTXHhPo/eFBWMA6kKaZm0XAeOj G7joNi66VY=&c=SVlq385JM48nzJnz6aHYqEdgCj04a8pzeVBFL2Z8JD1K6u1NEEOlKjn4VDwy7iA7JNSmSI5qVVYZnrwcMuh8o9wzCH3NPfYp4bQRUoZG9NDkMmg5UXwff/grVzz1XuUp&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.sendcurrentapp.com/c?x=ARH5cjr3A8RrcyBnDYX8rXetkTUuFlSDRVDPwRJtl9Q=&c=2lwLpUVSunK2lv1HT5j0YMfQS0QTzdQDrfj5Jjh7XJoP932SWT7/zaAVhAlplBpE4EgNjAhsjZi3u3J9dMoEJSzeihT6zBAiu UPOFW9Z4kdL NvCgKpFV8tL0dxZO62&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

http://www.quickappsgift.com/c?x=0JeLfQboD9Z8FpCm/yHRPxJNZlQoI8RtCDeKpA5xOfg=&c=gSDVT GbB9wA6/ssCR00ws/rZq6 IO7e/2jh7tHfXM3lok5PJqW4C3KYzRZrtT9lMgrFVKfN6mgF6ZwhSUbI0gy 9TcK2rRw5NnQeE0Pj/o1mrersG88PeS0BopNvsFg&fallback_url=http://files-download.poradnikdogry.pl/InternetISieci/Przegladarki/.../ChromeStandaloneSetup.exe

Remove google chrome 48.0.2564.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.