{"id":714,"date":"2014-06-03T14:13:00","date_gmt":"2014-06-03T14:13:00","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=714"},"modified":"2018-05-29T12:02:52","modified_gmt":"2018-05-29T12:02:52","slug":"new-it-limited-digital-signature","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/new-it-limited-digital-signature\/","title":{"rendered":"New IT Limited Digital Signature &#8211; What does it bundle?"},"content":{"rendered":"<p>I was playing around and testing some downloads when I found a file signed by <strong>New IT Limited<\/strong>. This is how it looks when double-clicking on the file and\u00a0<strong>New IT Limited<\/strong> appears as the publisher.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/new-it-limited-publisher.png\"><img loading=\"lazy\" class=\"alignnone wp-image-717 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/new-it-limited-publisher.png\" alt=\"new it limited publisher\" width=\"480\" height=\"277\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/new-it-limited-publisher.png 480w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/new-it-limited-publisher-300x173.png 300w\" sizes=\"(max-width: 480px) 100vw, 480px\" \/><\/a><\/p>\n<p>It is also possible to check a digital signature by looking at a file&#8217;s properties. \u00a0Here&#8217;s a screenshot of the <strong>New IT Limited<\/strong> certificate:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/new-it-limited-certificate.png\"><img loading=\"lazy\" class=\"alignnone wp-image-715 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/new-it-limited-certificate.png\" alt=\"The New I Lmited certificate\" width=\"428\" height=\"261\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/new-it-limited-certificate.png 428w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/new-it-limited-certificate-300x182.png 300w\" sizes=\"(max-width: 428px) 100vw, 428px\" \/><\/a><\/p>\n<p><strong>New IT Limited<\/strong>\u00a0appears to be located in Nicosia, Cyprus.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/new-it-limited-subject.png\"><img loading=\"lazy\" class=\"alignnone wp-image-718 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/new-it-limited-subject.png\" alt=\"new it limited subject\" width=\"428\" height=\"456\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/new-it-limited-subject.png 428w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/new-it-limited-subject-281x300.png 281w\" sizes=\"(max-width: 428px) 100vw, 428px\" \/><\/a><\/p>\n<p>What initially caught my interest was that the file was named Game of Thrones HDTV.. after the the famous TV-series <a href=\"http:\/\/en.wikipedia.org\/wiki\/Game_of_Thrones\">Game of Thrones<\/a> from HBO. 2 the 51 scanners over at VirusTotal detected the New IT Limited file. <strong>Win32:FourShared-D [PUP]<\/strong> and a variant of <strong>Win32\/4Shared.S<\/strong> where the detection names:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/new-it-limited-virus-total.png\"><img loading=\"lazy\" class=\"alignnone wp-image-774 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/new-it-limited-virus-total.png\" alt=\"New IT Limited VirusTotal scan FourShared\/4Shared\" width=\"807\" height=\"365\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/new-it-limited-virus-total.png 807w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/new-it-limited-virus-total-300x135.png 300w\" sizes=\"(max-width: 807px) 100vw, 807px\" \/><\/a><\/p>\n<p>Since the <strong>ESET-NOD32<\/strong> and <strong>Avast<\/strong> detected the file I got curious and decided to run the file. Turns out the installer bundled the Qone8 search engine:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/new-it-limited-installer.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-716\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/new-it-limited-installer.png\" alt=\"new-it-limited-installer\" width=\"489\" height=\"111\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/new-it-limited-installer.png 489w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/new-it-limited-installer-300x68.png 300w\" sizes=\"(max-width: 489px) 100vw, 489px\" \/><\/a><\/p>\n<p>Did you also find a download that was digitally signed by New IT Limited? What kind of download was it?<\/p>\n<p>Thanks for reading!<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I was playing around and testing some downloads when I found a file signed by New IT Limited. This is how it looks when double-clicking on the file and\u00a0New IT Limited appears as the publisher. It is also possible to check a digital signature by looking at a file&#8217;s properties. \u00a0Here&#8217;s a screenshot of the &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/new-it-limited-digital-signature\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">New IT Limited Digital Signature &#8211; What does it bundle?<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/714"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=714"}],"version-history":[{"count":3,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/714\/revisions"}],"predecessor-version":[{"id":2026,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/714\/revisions\/2026"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=714"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=714"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=714"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}