{"id":6678,"date":"2015-07-12T14:22:40","date_gmt":"2015-07-12T14:22:40","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=6678"},"modified":"2018-05-29T11:57:33","modified_gmt":"2018-05-29T11:57:33","slug":"astori-llc-18-detection-rate","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/astori-llc-18-detection-rate\/","title":{"rendered":"Astori LLC &#8211; 18% Detection Rate"},"content":{"rendered":"<p>Hello! Was looking for some downloads to play around with and found one, digitally signed by <strong>Astori LLC<\/strong>. The file is named in such a way that users might think it is a download for the Game of Thrones TV series.<\/p>\n<p>The following screenshot shows the User Account Control dialog when running the Astori LLC file:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/07\/Astori-LLC-publisher.png\"><img loading=\"lazy\" class=\"alignnone size-large wp-image-6680\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/07\/Astori-LLC-publisher.png\" alt=\"Astori LLC publisher\" width=\"514\" height=\"309\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/07\/Astori-LLC-publisher.png 514w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/07\/Astori-LLC-publisher-300x180.png 300w\" sizes=\"(max-width: 514px) 100vw, 514px\" \/><\/a><\/p>\n<p>It&#8217;s possible to view additional information about the certificate by right-clicking on the file, choosing properties and then clicking on the Digital Signatures tab. According to the certificate we can see that Astori LLC appears to be located in Moscow, Russia and that the certificate is issued by COMODO Code Signing CA 2.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/07\/Astori-LLC-cert.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-6679\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/07\/Astori-LLC-cert.png\" alt=\"Astori LLC cert\" width=\"381\" height=\"437\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/07\/Astori-LLC-cert.png 381w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/07\/Astori-LLC-cert-261x300.png 261w\" sizes=\"(max-width: 381px) 100vw, 381px\" \/><\/a><\/p>\n<p>I found an older file, also signed by Astori LLC. This one was detected by 10 of the 57 scanners over at VirusTotal:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/07\/Astori-LLC-virustotal.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-6681\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/07\/Astori-LLC-virustotal.png\" alt=\"Astori LLC virustotal\" width=\"473\" height=\"258\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/07\/Astori-LLC-virustotal.png 473w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/07\/Astori-LLC-virustotal-300x163.png 300w\" sizes=\"(max-width: 473px) 100vw, 473px\" \/><\/a><\/p>\n<p>Did you also find a Astori LLC file? What kind of download was it? If you remember the download link, please post it in the comments below.<\/p>\n<p>Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hello! Was looking for some downloads to play around with and found one, digitally signed by Astori LLC. The file is named in such a way that users might think it is a download for the Game of Thrones TV series. The following screenshot shows the User Account Control dialog when running the Astori LLC &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/astori-llc-18-detection-rate\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Astori LLC &#8211; 18% Detection Rate<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[448,447],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/6678"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=6678"}],"version-history":[{"count":2,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/6678\/revisions"}],"predecessor-version":[{"id":6683,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/6678\/revisions\/6683"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=6678"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=6678"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=6678"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}