{"id":3732,"date":"2015-01-04T16:56:55","date_gmt":"2015-01-04T16:56:55","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=3732"},"modified":"2018-05-29T12:01:08","modified_gmt":"2018-05-29T12:01:08","slug":"alpha-apps-fried-cookie-ltd-14-detection-rate-installcore","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/alpha-apps-fried-cookie-ltd-14-detection-rate-installcore\/","title":{"rendered":"Alpha Apps (Fried Cookie Ltd.) &#8211; 14% Detection Rate &#8211; InstallCore"},"content":{"rendered":"<p>Hi there! Just wanted to give you the heads up on a file called Skype_Setup.exe that&#8217;s digitally signed by <strong>Alpha Apps (Fried Cookie Ltd.)<\/strong>.<\/p>\n<p>Here how Alpha Apps (Fried Cookie Ltd.) appears in the UAC dialog when running\u00a0Skype_Setup.exe as admin:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Alpha-Apps-Fried-Cookie-LTD.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-3734\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Alpha-Apps-Fried-Cookie-LTD.png\" alt=\"Alpha Apps Fried Cookie LTD\" width=\"491\" height=\"293\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Alpha-Apps-Fried-Cookie-LTD.png 491w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Alpha-Apps-Fried-Cookie-LTD-300x179.png 300w\" sizes=\"(max-width: 491px) 100vw, 491px\" \/><\/a><\/p>\n<p>The Alpha Apps (Fried Cookie Ltd.) certificate shows that the publisher is located in Tel-Aviv, Israel.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Alpha-Apps-certificate.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-3733\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Alpha-Apps-certificate.png\" alt=\"Alpha Apps certificate\" width=\"504\" height=\"421\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Alpha-Apps-certificate.png 504w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Alpha-Apps-certificate-300x250.png 300w\" sizes=\"(max-width: 504px) 100vw, 504px\" \/><\/a><\/p>\n<p>What caught my attention was that the download was called Skype_Setup.exe. This might look like an official <strong>Skype<\/strong> download, but it is not. If it was an official download, it would be digitally signed by <strong>Skype Software Sarl<\/strong>. Here&#8217;s how the <strong>authentic Skype<\/strong> looks like when you double click on it. Notice that the &#8220;Verified publisher&#8221; says &#8220;Skype Software Sarl&#8221;.<br \/>\n<a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/12\/Skype-Software-Sarl-publisher.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-3425\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/12\/Skype-Software-Sarl-publisher.png\" alt=\"Skype Software Sarl publisher\" width=\"479\" height=\"277\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/12\/Skype-Software-Sarl-publisher.png 479w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/12\/Skype-Software-Sarl-publisher-300x173.png 300w\" sizes=\"(max-width: 479px) 100vw, 479px\" \/><\/a><\/p>\n<p>The problem with the Alpha Apps (Fried Cookie Ltd.) file is that it is detected by some of the antimalware scanners. Here are some of the detection names: Trojan.InstallCore.39, a variant of Win32\/InstallCore.SX, Unwanted-Program ( 004b2d871 ) and InstallCore (fs).<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/alpha-apps-virustotal.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-3735\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/alpha-apps-virustotal.png\" alt=\"alpha apps virustotal\" width=\"622\" height=\"299\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/alpha-apps-virustotal.png 622w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/alpha-apps-virustotal-300x144.png 300w\" sizes=\"(max-width: 622px) 100vw, 622px\" \/><\/a><\/p>\n<p>Did you also find a Alpha Apps (Fried Cookie Ltd.) file?<\/p>\n<p>Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hi there! Just wanted to give you the heads up on a file called Skype_Setup.exe that&#8217;s digitally signed by Alpha Apps (Fried Cookie Ltd.). Here how Alpha Apps (Fried Cookie Ltd.) appears in the UAC dialog when running\u00a0Skype_Setup.exe as admin: The Alpha Apps (Fried Cookie Ltd.) certificate shows that the publisher is located in Tel-Aviv, &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/alpha-apps-fried-cookie-ltd-14-detection-rate-installcore\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Alpha Apps (Fried Cookie Ltd.) &#8211; 14% Detection Rate &#8211; InstallCore<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[252,251],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3732"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=3732"}],"version-history":[{"count":2,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3732\/revisions"}],"predecessor-version":[{"id":3737,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3732\/revisions\/3737"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=3732"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=3732"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=3732"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}