{"id":8144,"date":"2015-11-24T18:24:20","date_gmt":"2015-11-24T18:24:20","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=8144"},"modified":"2018-05-29T11:55:39","modified_gmt":"2018-05-29T11:55:39","slug":"setupflash-new-media-holdings-ltd-18-detection-rate","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/setupflash-new-media-holdings-ltd-18-detection-rate\/","title":{"rendered":"SetupFlash (New Media Holdings Ltd.) – 18% Detection Rate"},"content":{"rendered":"

Hello readers! Just wanted to let you know about a publisher called SetupFlash (New Media Holdings Ltd.)<\/strong> before going back to writing some code for FreeFixer.<\/p>\n

\"SetupFlash<\/a><\/p>\n

This is how it looks when double-clicking on the file and SetupFlash (New Media Holdings Ltd.) appears as the publisher. To get more details on the publisher, you can view the certificate by right-clicking on the file, and looking under the Digital Signatures tab. According to the certificate we can see that SetupFlash (New Media Holdings Ltd.) seems to be located in Israel and that the certificate is issued by GlobalSign CodeSigning CA – G2.<\/p>\n

\"SetupFlash<\/a><\/p>\n

What caught my attention was that the download was called chrome-download.exe. This might look like an official Google Chrome<\/strong> download, but it is not. If it was an official download, it should be signed by Google Inc.<\/strong>. Here’s how the authentic Google Chrome<\/strong> looks like when you double click on it. Notice that the “Verified publisher” says “Google Inc”.
\n\"Chrome<\/a><\/p>\n

If you are considering to run the SetupFlash (New Media Holdings Ltd.) signed file, I’ll advice you not to. Delete it instead. Just check out detection list by some of the anti-virus program:<\/p>\n

\"SetupFlash<\/a><\/p>\n

Ikarus classifies chrome-download.exe as PUA.InstallCore<\/strong>, VIPRE detects it as InstallCore (fs)<\/strong>, Malwarebytes detects it as PUP.Optional.InstallCore<\/strong> and Sophos reports Install Core Click run software (PUA)<\/strong>.<\/p>\n

Did you also find a SetupFlash (New Media Holdings Ltd.) file?<\/p>\n

Thank you for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"

Hello readers! Just wanted to let you know about a publisher called SetupFlash (New Media Holdings Ltd.) before going back to writing some code for FreeFixer. This is how it looks when double-clicking on the file and SetupFlash (New Media Holdings Ltd.) appears as the publisher. To get more details on the publisher, you can … Continue reading SetupFlash (New Media Holdings Ltd.) – 18% Detection Rate<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[252,251],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/8144"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=8144"}],"version-history":[{"count":1,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/8144\/revisions"}],"predecessor-version":[{"id":8148,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/8144\/revisions\/8148"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=8144"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=8144"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=8144"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}