{"id":3907,"date":"2015-01-15T08:07:33","date_gmt":"2015-01-15T08:07:33","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=3907"},"modified":"2018-05-29T12:01:04","modified_gmt":"2018-05-29T12:01:04","slug":"alpha-source-fried-cookie-ltd-12-detection-rate-installcore","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/alpha-source-fried-cookie-ltd-12-detection-rate-installcore\/","title":{"rendered":"Alpha Source (Fried Cookie Ltd.) – 12% Detection Rate – InstallCore"},"content":{"rendered":"

Welcome! Just a tiny\u00a0post on a publisher called Alpha Source (Fried Cookie Ltd.)<\/strong> before going back to some coding on FreeFixer<\/a>.<\/p>\n

By examining the certificate, we can see that Alpha Source (Fried Cookie Ltd.) appears to be located in Tel Aviv in Israel. The certificate is issued by GlobalSign CodeSigning CA – G2.<\/p>\n

\"Alpha<\/a><\/p>\n

The problem here is that if mozilla_firefox.exe<\/a> really was an installer for Mozilla Firefox, it would have been digitally signed by Mozilla Corporation<\/strong> and not by some unknown company. Here’s how the authentic Mozilla Firefox<\/strong> looks like when you double click on it. Notice that the “Verified publisher” says “Mozilla Corporation”.
\n\"Mozilla<\/a><\/p>\n

When I uploaded the Alpha Source (Fried Cookie Ltd.) file to VirusTotal<\/a>, it came up with a 12% detection rate. The file is detected as Application.Win32.InstallCore.AKL<\/strong> by Comodo, a variant of Win32\/InstallCore.UN<\/strong> by ESET-NOD32, Win32\/Virus.Adware.eef<\/strong> by Qihoo-360 and InstallCore (fs)<\/strong> by VIPRE.<\/p>\n

\"Alpha<\/a><\/p>\n

Did you also find an Alpha Source (Fried Cookie Ltd.)? Do you remember the download link? Please post it in the comments below and I’ll upload it to VirusTotal<\/a> to see if that one is also detected.<\/p>\n

Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"

Welcome! Just a tiny\u00a0post on a publisher called Alpha Source (Fried Cookie Ltd.) before going back to some coding on FreeFixer. By examining the certificate, we can see that Alpha Source (Fried Cookie Ltd.) appears to be located in Tel Aviv in Israel. The certificate is issued by GlobalSign CodeSigning CA – G2. The problem … Continue reading Alpha Source (Fried Cookie Ltd.) – 12% Detection Rate – InstallCore<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54,178],"tags":[104,252,251],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3907"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=3907"}],"version-history":[{"count":2,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3907\/revisions"}],"predecessor-version":[{"id":3911,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3907\/revisions\/3911"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=3907"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=3907"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=3907"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}