{"id":7416,"date":"2015-09-15T05:19:26","date_gmt":"2015-09-15T05:19:26","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=7416"},"modified":"2018-05-29T11:55:45","modified_gmt":"2018-05-29T11:55:45","slug":"crossbeam-new-media-holdings-ltd-9-detection-rate-at-virustotal","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/crossbeam-new-media-holdings-ltd-9-detection-rate-at-virustotal\/","title":{"rendered":"CrossBeam (New Media Holdings Ltd.) – 9% Detection Rate at VirusTotal"},"content":{"rendered":"

Hello! Was looking for some downloads to play around with and found one, digitally signed by CrossBeam (New Media Holdings Ltd.)<\/strong>. The file is named chrome-download.exe<\/a>.<\/p>\n

\"CrossBeam<\/a><\/p>\n

Typically you’d see the CrossBeam (New Media Holdings Ltd.) publisher name appear when double-clicking on the chrome-download.exe file: By examining the certificate, we can see that CrossBeam (New Media Holdings Ltd.) appears to be located in Tel Avivl, Israel.<\/p>\n

\"CrossBeam<\/a><\/p>\n

The certificate is issued by GlobalSign CodeSigning CA – G2.\"CrossBeam<\/a><\/p>\n

The issue here is that if chrome-download.exe really was a setup file for Google Chrome, it should be signed by Google Inc.<\/strong> and not by some unknown company. Here’s how the authentic Google Chrome<\/strong> looks like when you double click on it. Notice that the “Verified publisher” says “Google Inc”.
\n\"Chrome<\/a><\/p>\n

9% of the anti-virus scanners detected the file. Some of the detection names for the chrome-download.exe file are a variant of Win32\/InstallCore.ACQ.gen potentially unwanted, PUP.Optional.InstallCore and InstallCore (fs).<\/p>\n

\"CrossBeam<\/a><\/p>\n

When I tested the CrossBeam file it bundled\u00a0StormFall<\/a> and Norton 360. The checkbox for these two programs were not checked by default.<\/p>\n

Did you also find a CrossBeam (New Media Holdings Ltd.) file? What kind of download was it? If you remember the download link, please post it in the comments below.<\/p>\n

Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"

Hello! Was looking for some downloads to play around with and found one, digitally signed by CrossBeam (New Media Holdings Ltd.). The file is named chrome-download.exe. Typically you’d see the CrossBeam (New Media Holdings Ltd.) publisher name appear when double-clicking on the chrome-download.exe file: By examining the certificate, we can see that CrossBeam (New Media … Continue reading CrossBeam (New Media Holdings Ltd.) – 9% Detection Rate at VirusTotal<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[774,252,251],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7416"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=7416"}],"version-history":[{"count":3,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7416\/revisions"}],"predecessor-version":[{"id":7423,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7416\/revisions\/7423"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=7416"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=7416"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=7416"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}