{"id":4435,"date":"2015-02-12T10:25:15","date_gmt":"2015-02-12T10:25:15","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=4435"},"modified":"2018-05-29T12:00:35","modified_gmt":"2018-05-29T12:00:35","slug":"leading-funnel-fried-cookie-ltd-16-detection-rate-installcore","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/leading-funnel-fried-cookie-ltd-16-detection-rate-installcore\/","title":{"rendered":"Leading Funnel (Fried Cookie Ltd.) &#8211; 16% Detection Rate &#8211; InstallCore"},"content":{"rendered":"<p>Heya! I was playing around and testing some downloads last night and found a file digitally signed by <strong>Leading Funnel (Fried Cookie Ltd.)<\/strong>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/02\/Leading-Funnel-Fried-Cookie-Ltd-certificate.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-4436\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/02\/Leading-Funnel-Fried-Cookie-Ltd-certificate.png\" alt=\"Leading Funnel Fried Cookie Ltd certificate\" width=\"384\" height=\"373\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/02\/Leading-Funnel-Fried-Cookie-Ltd-certificate.png 384w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/02\/Leading-Funnel-Fried-Cookie-Ltd-certificate-300x291.png 300w\" sizes=\"(max-width: 384px) 100vw, 384px\" \/><\/a><\/p>\n<p>To view more information about the certificate you can right-click on the file, then choose Properties and then select the Digital Signatures tab. According to the certificate we can see that Leading Funnel (Fried Cookie Ltd.) appears to be located in Tel Aviv and that the certificate is issued by GlobalSign CodeSigning CA &#8211; G2.<\/p>\n<p>When I uploaded the file to <a title=\"How To Scan a File for Viruses with VirusTotal\" href=\"http:\/\/www.freefixer.com\/b\/scan-files-for-viruses-virustotal\/\">VirusTotal<\/a> &#8211; as I usually do when I find something that looks suspicious &#8211; 16% of the antivirus scanners detected the file. The file is detected as <strong>Application.Win32.FriedCookie.CIRK<\/strong> by Comodo, <strong>Trojan.InstallCore.53<\/strong> by DrWeb, <strong>a variant of Win32\/InstallCore.VM potentially unwanted<\/strong> by ESET-NOD32 and <strong>InstallCore (fs)<\/strong> by VIPRE.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/02\/Leading-Funnel-Fried-Cookie-Ltd.-virustotal.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-4437\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/02\/Leading-Funnel-Fried-Cookie-Ltd.-virustotal.png\" alt=\"Leading Funnel Fried Cookie Ltd. virustotal\" width=\"746\" height=\"428\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/02\/Leading-Funnel-Fried-Cookie-Ltd.-virustotal.png 746w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/02\/Leading-Funnel-Fried-Cookie-Ltd.-virustotal-300x172.png 300w\" sizes=\"(max-width: 746px) 100vw, 746px\" \/><\/a><\/p>\n<p>Did you also find a Leading Funnel (Fried Cookie Ltd.) file? Do you remember where you downloaded it?<\/p>\n<p>Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Heya! I was playing around and testing some downloads last night and found a file digitally signed by Leading Funnel (Fried Cookie Ltd.). To view more information about the certificate you can right-click on the file, then choose Properties and then select the Digital Signatures tab. According to the certificate we can see that Leading &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/leading-funnel-fried-cookie-ltd-16-detection-rate-installcore\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Leading Funnel (Fried Cookie Ltd.) &#8211; 16% Detection Rate &#8211; InstallCore<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[372,104,252,251],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4435"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=4435"}],"version-history":[{"count":1,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4435\/revisions"}],"predecessor-version":[{"id":4438,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4435\/revisions\/4438"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=4435"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=4435"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=4435"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}