{"id":3787,"date":"2015-01-05T21:01:17","date_gmt":"2015-01-05T21:01:17","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=3787"},"modified":"2018-05-29T12:01:07","modified_gmt":"2018-05-29T12:01:07","slug":"install-source-fried-cookie-ltd-detection-rate-installcore","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/install-source-fried-cookie-ltd-detection-rate-installcore\/","title":{"rendered":"Install Source (Fried Cookie Ltd.) &#8211; 9% Detection Rate &#8211; InstallCore"},"content":{"rendered":"<p>Hello! I was playing around and testing some downloads when I found a file signed by <strong>Install Source (Fried Cookie Ltd.)<\/strong>.<\/p>\n<p>If you have a Install Source (Fried Cookie Ltd.) file on your computer you may have noticed that Install Source (Fried Cookie Ltd.) pops up as the publisher in the User Account Control dialog when running the file. It is also possible to check a digital signature by looking at a file&#8217;s properties.<\/p>\n<p>The issue is that chrome_setup.exe is not an official Google Chrome download. If it was, it should be signed by <strong>Google Inc.<\/strong>. Here&#8217;s how the <strong>authentic Google Chrome<\/strong> looks like when you double click on it. Notice that the &#8220;Verified publisher&#8221; says &#8220;Google Inc&#8221;.<br \/>\n<a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/12\/Chrome-Google-Inc-publisher.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-3423\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/12\/Chrome-Google-Inc-publisher.png\" alt=\"Chrome Google Inc publisher\" width=\"483\" height=\"280\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/12\/Chrome-Google-Inc-publisher.png 483w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/12\/Chrome-Google-Inc-publisher-300x173.png 300w\" sizes=\"(max-width: 483px) 100vw, 483px\" \/><\/a><\/p>\n<p>Of the 56 anti-virus scanners, 5 detected the file. AVG reports chrome_setup.exe as <strong>Generic.834<\/strong>, AVware detects it as <strong>InstallCore (fs)<\/strong>, Comodo detects it as <strong>Application.Win32.FriedCookie.CIRK<\/strong>, ESET-NOD32 reports <strong>a variant of Win32\/InstallCore.UT<\/strong> and VIPRE detects it as <strong>InstallCore (fs)<\/strong>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Install-Source-virustotal.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-3788\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Install-Source-virustotal.png\" alt=\"Install Source virustotal\" width=\"636\" height=\"429\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Install-Source-virustotal.png 636w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Install-Source-virustotal-300x202.png 300w\" sizes=\"(max-width: 636px) 100vw, 636px\" \/><\/a><\/p>\n<p>Did you also find a file digitally signed by Install Source (Fried Cookie Ltd.)? Where did you find it and are the anti-virus programs detecting it? Please share in the comments below.<\/p>\n<p>Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hello! I was playing around and testing some downloads when I found a file signed by Install Source (Fried Cookie Ltd.). If you have a Install Source (Fried Cookie Ltd.) file on your computer you may have noticed that Install Source (Fried Cookie Ltd.) pops up as the publisher in the User Account Control dialog &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/install-source-fried-cookie-ltd-detection-rate-installcore\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Install Source (Fried Cookie Ltd.) &#8211; 9% Detection Rate &#8211; InstallCore<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3787"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=3787"}],"version-history":[{"count":1,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3787\/revisions"}],"predecessor-version":[{"id":3789,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3787\/revisions\/3789"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=3787"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=3787"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=3787"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}