{"id":7088,"date":"2015-08-31T19:40:56","date_gmt":"2015-08-31T19:40:56","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=7088"},"modified":"2015-08-31T19:40:56","modified_gmt":"2015-08-31T19:40:56","slug":"llc-soft-trade-ltd-5-detection-rate-amonetize","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/llc-soft-trade-ltd-5-detection-rate-amonetize\/","title":{"rendered":"LLC “SOFT TRADE LTD” – 5% Detection Rate – Amonetize"},"content":{"rendered":"

Hello! If you’ve been following me for the last year you know that I’ve been examining many software publishers that put a digital signature on their downloads. Today I found another publisher called LLC “SOFT TRADE LTD”<\/strong>.<\/p>\n

\"LLC<\/a><\/p>\n

Typically you’d see the LLC “SOFT TRADE LTD” publisher name appear when double-clicking on the FlashPlayer__6741_i1609075630_il45347.exe file: It is also possible to check a digital signature by looking at a file’s properties. Here’s a screenshot of the LLC “SOFT TRADE LTD” certificate.<\/p>\n

\"LLC<\/a><\/p>\n

 <\/p>\n

The company is located in Ukraine says the certificate. UserTrust and Comodo is found in the certificate chain:<\/p>\n

\"SOFT<\/a><\/p>\n

What caught my attention was that the download was called FlashPlayer__6741_i1609075630_il45347.exe. This might look like an official Adobe Flash Player<\/strong> download, but it is not. If it was an official download, it should be digitally signed by Adobe Systems Incorporated<\/strong>. Here’s how the authentic Adobe Flash Player<\/strong> looks like when you double click on it. Notice that the “Verified publisher” says “Adobe Systems Incorporated”.
\n\"Adobe<\/a><\/p>\n

 <\/p>\n

Here’s how the LLC “SOFT TRADE LTD”\u00a0<\/strong>installer looks like:<\/p>\n

\"LLC<\/a><\/p>\n

ADWARE\/Amonetize.Gen and a variant of Win32\/Amonetize.HN potentially unwanted are some detection names according to VirusTotal<\/a>:<\/p>\n

\"LLC<\/a><\/p>\n

Did you also find a LLC “SOFT TRADE LTD” file? What kind of download was it? If you remember the download link, please post it in the comments below.<\/p>\n

Thank you for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"

Hello! If you’ve been following me for the last year you know that I’ve been examining many software publishers that put a digital signature on their downloads. Today I found another publisher called LLC “SOFT TRADE LTD”. Typically you’d see the LLC “SOFT TRADE LTD” publisher name appear when double-clicking on the FlashPlayer__6741_i1609075630_il45347.exe file: It … Continue reading LLC “SOFT TRADE LTD” – 5% Detection Rate – Amonetize<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[726,305,725],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7088"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=7088"}],"version-history":[{"count":3,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7088\/revisions"}],"predecessor-version":[{"id":7100,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7088\/revisions\/7100"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=7088"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=7088"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=7088"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}