{"id":5026,"date":"2015-02-20T21:10:42","date_gmt":"2015-02-20T21:10:42","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=5026"},"modified":"2018-05-29T12:00:30","modified_gmt":"2018-05-29T12:00:30","slug":"mode-alpha-fried-cookie-ltd-9-anti-virus-detection-installcore","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/mode-alpha-fried-cookie-ltd-9-anti-virus-detection-installcore\/","title":{"rendered":"Mode Alpha (Fried Cookie Ltd.) &#8211; 9% Anti-Virus Detection &#8211; InstallCore"},"content":{"rendered":"<p>Hello! If you&#8217;ve been following me for the last year you know that I&#8217;ve been examining many software publishers that put a digital signature on their downloads. Today I found another publisher called <strong>Mode Alpha (Fried Cookie Ltd.)<\/strong>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/Mode-Alpha-Fried-Cookie-Ltd-dialog.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-5029\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/Mode-Alpha-Fried-Cookie-Ltd-dialog.png\" alt=\"Mode Alpha Fried Cookie Ltd dialog\" width=\"500\" height=\"298\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/Mode-Alpha-Fried-Cookie-Ltd-dialog.png 500w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/Mode-Alpha-Fried-Cookie-Ltd-dialog-300x178.png 300w\" sizes=\"(max-width: 500px) 100vw, 500px\" \/><\/a><\/p>\n<p>You can also look at the Mode Alpha (Fried Cookie Ltd.) certificate and digital signature by looking under the Digital Signatures tab on the file&#8217;s properties. According to the certificate, Mode Alpha (Fried Cookie Ltd.) is located in Tel Aviv, Israel.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/Mode-Alpha-Fried-Cookie-certificate.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-5028\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/Mode-Alpha-Fried-Cookie-certificate.png\" alt=\"Mode Alpha Fried Cookie certificate\" width=\"481\" height=\"458\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/Mode-Alpha-Fried-Cookie-certificate.png 481w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/Mode-Alpha-Fried-Cookie-certificate-300x285.png 300w\" sizes=\"(max-width: 481px) 100vw, 481px\" \/><\/a><\/p>\n<p>What caught my attention was that the download was called Skype_Setup.exe. This might look like an official <strong>Skype<\/strong> download, but it is not. If it was an official download, it would have been digitally signed by <strong>Skype Software Sarl<\/strong>. Here&#8217;s how the <strong>authentic Skype<\/strong> looks like when you double click on it. Notice that the &#8220;Verified publisher&#8221; says &#8220;Skype Software Sarl&#8221;.<br \/>\n<a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/12\/Skype-Software-Sarl-publisher.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-3425\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/12\/Skype-Software-Sarl-publisher.png\" alt=\"Skype Software Sarl publisher\" width=\"479\" height=\"277\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/12\/Skype-Software-Sarl-publisher.png 479w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/12\/Skype-Software-Sarl-publisher-300x173.png 300w\" sizes=\"(max-width: 479px) 100vw, 479px\" \/><\/a><\/p>\n<p>If you are considering to run the Mode Alpha (Fried Cookie Ltd.) signed file, I&#8217;ll advice you not to. Delete it instead. Just check out detection list by some of the anti-virus program:<\/p>\n<p>Comodo classifies Skype_Setup.exe as <strong>Application.Win32.InstallCore.AKZ<\/strong>, ESET-NOD32 detects it as <strong>a variant of Win32\/InstallCore.XC potentially unwanted<\/strong> and VIPRE calls it <strong>InstallCore (fs)<\/strong>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/Mode-Alpha-anti-virus-report.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-5027\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/Mode-Alpha-anti-virus-report.png\" alt=\"Mode Alpha anti-virus report\" width=\"760\" height=\"434\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/Mode-Alpha-anti-virus-report.png 760w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/Mode-Alpha-anti-virus-report-300x171.png 300w\" sizes=\"(max-width: 760px) 100vw, 760px\" \/><\/a><\/p>\n<p>Did you also find a Mode Alpha (Fried Cookie Ltd.) file?<\/p>\n<p>Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hello! If you&#8217;ve been following me for the last year you know that I&#8217;ve been examining many software publishers that put a digital signature on their downloads. Today I found another publisher called Mode Alpha (Fried Cookie Ltd.). You can also look at the Mode Alpha (Fried Cookie Ltd.) certificate and digital signature by looking &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/mode-alpha-fried-cookie-ltd-9-anti-virus-detection-installcore\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Mode Alpha (Fried Cookie Ltd.) &#8211; 9% Anti-Virus Detection &#8211; InstallCore<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[104,252,251],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/5026"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=5026"}],"version-history":[{"count":2,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/5026\/revisions"}],"predecessor-version":[{"id":5031,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/5026\/revisions\/5031"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=5026"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=5026"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=5026"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}