{"id":4032,"date":"2015-01-21T20:26:33","date_gmt":"2015-01-21T20:26:33","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=4032"},"modified":"2018-05-29T12:01:02","modified_gmt":"2018-05-29T12:01:02","slug":"max-media-fried-cookie-ltd-11-detection-installcore","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/max-media-fried-cookie-ltd-11-detection-installcore\/","title":{"rendered":"Max Media (Fried Cookie Ltd.) &#8211; 11% Detection &#8211; InstallCore"},"content":{"rendered":"<p>Hi there! Just a quick post today, since I&#8217;m busy working on some back-end stuff for\u00a0FreeFixer. Did you see a file, such as FlvPlayerSetup.exe, on your system digitally signed by <strong>Max Media (Fried Cookie Ltd.)<\/strong>? Then read on..<\/p>\n<p>By examining the certificate, we can see that Max Media (Fried Cookie Ltd.) is located in Tel Aviv, Israel. The certificate is issued by GlobalSign CodeSigning CA &#8211; G2. The certificate seems to be just a few days old.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/max-media-certificate.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-4033\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/max-media-certificate.png\" alt=\"max media certificate\" width=\"507\" height=\"414\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/max-media-certificate.png 507w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/max-media-certificate-300x244.png 300w\" sizes=\"(max-width: 507px) 100vw, 507px\" \/><\/a><\/p>\n<p>After uploading the Max Media (Fried Cookie Ltd.) file &#8211; FlvPlayerSetup.exe &#8211; to <a title=\"How To Scan a File for Viruses with VirusTotal\" href=\"http:\/\/www.freefixer.com\/b\/scan-files-for-viruses-virustotal\/\">VirusTotal<\/a>, it was clear that it&#8217;s probably better to delete the file than running it. The detection rate was 11% and some of the detection names were: a variant of Win32\/InstallCore.WC, PUP.Optional.InstallCore.A and InstallCore (fs).<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Max-Media-fried-cookie-ltd-virustotal.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-4034\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Max-Media-fried-cookie-ltd-virustotal.png\" alt=\"Max Media fried cookie ltd virustotal\" width=\"669\" height=\"427\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Max-Media-fried-cookie-ltd-virustotal.png 669w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/Max-Media-fried-cookie-ltd-virustotal-300x191.png 300w\" sizes=\"(max-width: 669px) 100vw, 669px\" \/><\/a><\/p>\n<p>I found the\u00a0Max Media file in a pop-up windows loaded from <strong>funlordious.com<\/strong>:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/funlordious.com-pop-up.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-4035\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/funlordious.com-pop-up.png\" alt=\"funlordious.com pop-up\" width=\"960\" height=\"616\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/funlordious.com-pop-up.png 960w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/01\/funlordious.com-pop-up-300x192.png 300w\" sizes=\"(max-width: 960px) 100vw, 960px\" \/><\/a><\/p>\n<p>Did you also find a download that was digitally signed by Max Media (Fried Cookie Ltd.)? What kind of download was it and was it detected by the anti-malware progams at <a title=\"How To Scan a File for Viruses with VirusTotal\" href=\"http:\/\/www.freefixer.com\/b\/scan-files-for-viruses-virustotal\/\">VirusTotal<\/a>? Please share by posting a comment.<\/p>\n<p>Thank you for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hi there! Just a quick post today, since I&#8217;m busy working on some back-end stuff for\u00a0FreeFixer. Did you see a file, such as FlvPlayerSetup.exe, on your system digitally signed by Max Media (Fried Cookie Ltd.)? Then read on.. By examining the certificate, we can see that Max Media (Fried Cookie Ltd.) is located in Tel &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/max-media-fried-cookie-ltd-11-detection-installcore\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Max Media (Fried Cookie Ltd.) &#8211; 11% Detection &#8211; InstallCore<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[372,371],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4032"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=4032"}],"version-history":[{"count":2,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4032\/revisions"}],"predecessor-version":[{"id":4037,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4032\/revisions\/4037"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=4032"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=4032"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=4032"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}