» File Validated
Digital Signature
Analysis
Files (12,647)
Downloads (9)
Related (3)

File Validated

Publisher Information

File Validated is a software publisher located in San Francisco, California in the United States*. The company is a primary distributor of unwanted software. Thre are 6 additional code signing certificates issued to this publisher.

Authority:

thawte, Inc.

Valid from:

4/19/2016 9:00:00 PM

Valid to:

4/20/2017 8:59:59 PM

Subject:

CN=File Validated, OU=IT, O=File Validated, L=San Francisco, S=California, C=US

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

3ba9eb573f2049f7e59d02caeea199ac

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.InstallCore (M), PUP.installCore (M)

100.00%

1 / 68 (Adware)

icreinstall_fivenightsatfreddys2_game_downloader.exe (Lepih) (cc741f751d863c8659d62d399234d5f6)

1 / 68 (Adware)

grandtheftauto_game_downloader.exe (Segodone) (9e3eb3cf452aba42fc703be2511245c6)

1 / 68 (Adware)

flashplayer_updater.exe (Lepih) (001434ccf68ef181f5159ce97cce79e1)

1 / 68 (Adware)

flashplayer_updater.exe (Lepih) (1c131ac140984accaffc7881e678bba8)

1 / 68 (Adware)

flashplayer_updater.exe (Segodone) (39f0ee9b2893f4624aff482ec9e22838)

1 / 68 (Adware)

flashplayer_updater.exe (Lepih) (123e692f97231fb3589ee0a74613f905)

1 / 68 (Adware)

flashplayer_updater.exe (Lepih) (aa641253045b81fc4f7d88ac1c5fa852)

1 / 68 (Adware)

geometrydash_game_downloader.exe (Lepih) (b2144b310dafce4b5d0a89a9ae41add9)

1 / 68 (Adware)

geometrydash_game_downloader.exe (Segodone) (7496365f7448e3b9c042293cbd51e566)

1 / 68 (Adware)

flashplayer_updater.exe (Lepih) (1ba0015be918a48f177e2b9e1b4267b9)

1 / 68 (Adware)

flashplayer_updater.exe (Dibaga by Tacuhocon) (b59c98533536ff17dd529031c8574ecd)

1 / 68 (Adware)

musical.ly_downloader.exe (Lepih) (da479093fcb04a1e6adaff9f373785aa)

1 / 68 (Adware)

flashplayer_updater.exe (Coharemi by Begusih) (d0469811fbc33a9298361c574f90881f)

1 / 68 (Adware)

younow_downloader.exe (Lepih) (b56d479001aa3d924304d62431c0ee10)

1 / 68 (Adware)

goatsimulator_game_downloader.exe (Dibaga by Tacuhocon) (d0277ca6ec88075f3d669088ee597684)

1 / 68 (Adware)

flashplayer_updater.exe (Lepih) (909b1bfce43d5909a603747cfebd7197)

1 / 68 (Adware)

flashplayer_updater.exe (Segodone) (7d995ba9a6aadfc7a5af879407eceefb)

1 / 68 (Adware)

flashplayer_updater.exe (Lepih) (149379310b370565bbd076b32eeabbc5)

1 / 68 (Adware)

flashplayer_updater.exe (Coharemi by Begusih) (5963a69c637def419c5e1ebf83093eaa)

1 / 68 (Adware)

icreinstall_flashplayer_updater.exe (Lepih) (ba639a2a8b49bde465d8357d85e064f5)

1 / 68 (Adware)

icreinstall_flashplayer_updater.exe (Lepih) (a5434932e9a66bab0f731f02565d9731)

1 / 68 (Adware)

wish_downloader.exe (Dibaga by Tacuhocon) (bbe4b6bf6ca0a3cbab71030ef26a5d2b)

1 / 68 (Adware)

flashplayer_updater.exe (Dibaga by Tacuhocon) (a0c7bdc4af13711d237678499e15168d)

1 / 68 (Adware)

flashplayer_updater.exe (Lepih) (6ed07b3f655a159ddfdf796125301ad5)

1 / 68 (Adware)

hbonow_downloader.exe (Dibaga by Tacuhocon) (d06c1b033bd5477811d935127ee25251)

1 / 68 (Adware)

icreinstall_musical.ly_downloader.exe (Dibaga by Tacuhocon) (8a70b79497c4566fde6e0f8db4a6a51c)

1 / 68 (Adware)

flashplayer_updater.exe (Dibaga by Tacuhocon) (aa24e9890ad46c1a96f47ea944c69a09)

1 / 68 (Adware)

icreinstall_flashplayer_updater.exe (Dibaga by Tacuhocon) (0b53a42fbdc14b16ab0dd3cfda3db63d)

1 / 68 (Adware)

icreinstall_moviestarplanet_game_downloader.exe (Coharemi by Begusih) (ba869dbbc275cc2d8362b9e2ce93534f)

1 / 68 (Adware)

flashplayer_updater.exe (Segodone) (f6613f36e21ce02b132fcb92e69ec795)

Latest 30 of 12,647 files

Downloads URLs for files signed by File Validated.

1 / 68 (Adware)

http://www.shareclearcurrent.com/c?x=XT bzB1Sp suhm0hiAQJQEIR1p05zUUZn779dCpbgQE=&c=Uy9zcrSgdDyzOlHcbUMv 4g 3I1Po/OMBpz 60H/Y9g7aIA/G1i 8b 1jWUBdi6JuWIX8e64TzkJiyDbxedSGp8ypY6xM9/Rk/9heKIM7zscptJtsJAyLAFfpWdYy 7g&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://tundra.site/pages/.../IM_IN.html (1c131ac140984accaffc7881e678bba8)

1 / 68 (Adware)

http://www.sendchucklequick.com/c?x=dO9FLDHzGFdbFGgK2WYYk opKkpxg61TBuz4/xPu1sk=&c=G80GtrfLR3eCgnBm bEpL0eovJKJqwQunuuh mkJaJp4qf8ztDT/1qxjAJ5lzLJ8GzoGrn7B6Mhje/IPiSFPGuZPKjwosf7JwuHSGtsjAuWT/GJ4YA aF3lmtn2d/LQE&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://piroga.space/pages/.../IM_IN.html (39f0ee9b2893f4624aff482ec9e22838)

1 / 68 (Adware)

http://www.capitalflashcontent.com/c?x=dKsx/4MrT0hp9ycMeLJJxxUImcFNqiA7xWr1rpqS4cc=&c=VKGsDbBriSLbuW8lzSqaK5 XPWraqzDvop36wvYOGf1ErbD3yYG8k8tfkBxMFw UordxNYj/UpghbceQOQewRhbaXIHZMVx7wjwzCGbTkDY=&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://piroga.space/pages/.../IM_IN.html (1ba0015be918a48f177e2b9e1b4267b9)

1 / 68 (Adware)

http://www.appcapitalfactory.com/c?x=5 lFv8eEY/UMWKqlgvwct86gN1wLLWLwIdw0Q6Q35bw=&c=FkMGwGKG6jci 5MXIq9dQiVA7/YaGC/OopR Vbj9q8M7ejy5zgCwVDHtw0mpiEcMQGxDquc mqTeJm4zUk6zcOG8dDMZd1nLawCobEtG0xA=&downloadAs=Musical.ly_Downloader.exe&fallback_url=http://piroga.space/pages/.../IM_IN.html (da479093fcb04a1e6adaff9f373785aa)

1 / 68 (Adware)

http://www.appcapitalfactory.com/c?x=hMgX2MyZ8n94Ww7rwa9nUMAgjRf6hmGflUSh/T0aNgs=&c=0wwZbtmDK9emKCltIYM3FkEP K/gKqVyu4KWuAFJ7RJ8XfxDO70TTj/vKca/q4YVef3TOpDILDVyleIJtv4jRtsK1/d27YjeIpVShK3Hj6g=&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://piroga.space/pages/.../IM_IN.html (909b1bfce43d5909a603747cfebd7197)

1 / 68 (Adware)

http://www.flashtowersbundles.com/c?x=RFKVxhmjYG5EnfH0VmKopomWt1l8ethfHB80VmHt6ys=&c=DH8tRda8DYaGhvFcDOW9VPHmJCzjeWVMCBn20a6KMvV/H986dG4UmIVb4WmzqcHQ9VzsmAnmXbXe6dlIofAvFloAODG3rU5C7LtGjryIAa46WJgxVdvY11WUaxymtNY1&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://piroga.space/pages/.../IM_IN.html (5963a69c637def419c5e1ebf83093eaa)

1 / 68 (Adware)

http://www.quickclearbinaries.com/c?x=OgQsXyztP42DnzEcKq2B1CRfYGL0vhISE1iddqpxwb4=&c=Os vQfh3tODizKK2RpfkDEbHEYjFiVSNRz8MbT69ItoeQ23ZMt41r2ZRGJpfw/5o8v0pVhj0uvebysYacwTjImzSndxAKJXFjR8kd60uo/6WWgQHLmZO0S2cjRuocI00&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://tundra.site/pages/.../IM_IN.html (6ed07b3f655a159ddfdf796125301ad5)

1 / 68 (Adware)

http://www.safefilesvaults.com/c?x=Kn1Z36IGdHfMOqJfYLfLhmdf7Od7tdYnHDnnCpNEMe0=&c=SbxQYQB/qvmdsDruwnO7 9h/PrNsZsMX 8wk7qVf43z9tlExjU2Ll2/sYwjGYZxEUoO/Yqn3OLPFiPXZ7SXX5DYvmfK1DOFyCXi/0JgPZ5vyMVsOVbCCf3pyNdRHbGBd&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://piroga.space/pages/.../IM_IN.html (aa24e9890ad46c1a96f47ea944c69a09)

1 / 68 (Adware)

http://www.shareclearcurrent.com/c?x=EV3Y/nXplmbhG5KY2Hy8hqw5FQALAMGTh46s5ov8hbg=&c=urdS hx5BVOspEKYmERmPffb1ofpajfwS5bEihKCmYd2GZl0tpvMJ0GGTwat3XjY0WBgsgp1BI u Hg6m657fLz1JwNalYGQnYqDEok5Cy77YY0uCg5RERvqz/SPXIp7&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://tundra.site/pages/.../IM_IN.html (6bb04f086a5482d2b324188601895182)

The certificates below are also signed by File Validated.

1C4E868160FF518C1903798F12C91A6B (Apr 27, 2016 to Apr 28, 2017)

11210B0B336C146B1DEA833B7DA98E456EB9 (Feb 11, 2016 to Feb 11, 2017)

112127B04ABA745F034A3BB2B235BBD0A1E4 (Feb 02, 2016 to Feb 02, 2017)

1C96D72469336B0857534EE1D7E9701D (Feb 26, 2015 to Feb 27, 2016)

00B274821CF9C21E53EE41ED664B1D2239 (Jan 08, 2015 to Jan 09, 2016)

00E2278F549ABFA7B55EC33EAEB0B4D0EC (Jan 08, 2015 to Jan 09, 2016)

The following publishers (by Authenticode signature organization name) are related.

Required Installs

Xpress Installer

Start Installer

* Note, the details and description above are based on the code signing digital signature issued to File Validated by thawte, Inc. on April 19, 2016 with the serial number '3ba9eb573f2049f7e59d02caeea199ac'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.