{"id":7346,"date":"2015-09-11T08:59:56","date_gmt":"2015-09-11T08:59:56","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=7346"},"modified":"2018-05-29T11:55:46","modified_gmt":"2018-05-29T11:55:46","slug":"sm-install-fried-cookie-ltd-12-detection-rate","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/sm-install-fried-cookie-ltd-12-detection-rate\/","title":{"rendered":"SM Install (Fried Cookie Ltd.) – 12% Detection Rate"},"content":{"rendered":"

Welcome! Just a short post on a publisher called SM Install (Fried Cookie Ltd.)<\/strong> before going back to some coding on FreeFixer.<\/p>\n

\"SM<\/a><\/p>\n

You can\u00a0view additional information about the certificate by right-clicking on the file, choosing properties and then clicking on the Digital Signatures tab. According to the certificate we can see that SM Install (Fried Cookie Ltd.) is located in Tel Aviv, Israel and that the certificate is issued by GlobalSign CodeSigning CA – G2.<\/p>\n

\"SM<\/a><\/p>\n

What caught my attention was that the download was called chrome-download.exe<\/a>. This might look like an official Google Chrome<\/strong> download, but it is not. If it was an official download, it should be digitally signed by Google Inc.<\/strong>. Here’s how the authentic Google Chrome<\/strong> looks like when you double click on it. Notice that the “Verified publisher” says “Google Inc”.
\n\"Chrome<\/a><\/p>\n

When I uploaded the SM Install (Fried Cookie Ltd.) file to VirusTotal<\/a>, it came up with a 12% detection rate. The file is detected as Generic.BEC<\/strong> by AVG, Install Core Click run software (PUA)<\/strong> by Sophos and InstallCore (fs)<\/strong> by VIPRE.<\/p>\n

\"SM<\/a><\/p>\n

Did you also find a SM Install (Fried Cookie Ltd.) file?<\/p>\n

Thank you for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"

Welcome! Just a short post on a publisher called SM Install (Fried Cookie Ltd.) before going back to some coding on FreeFixer. You can\u00a0view additional information about the certificate by right-clicking on the file, choosing properties and then clicking on the Digital Signatures tab. According to the certificate we can see that SM Install (Fried … Continue reading SM Install (Fried Cookie Ltd.) – 12% Detection Rate<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[252,251],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7346"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=7346"}],"version-history":[{"count":2,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7346\/revisions"}],"predecessor-version":[{"id":7351,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7346\/revisions\/7351"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=7346"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=7346"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=7346"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}