home

FlashFunnel (New Media Holdings Ltd)

Publisher Information

FlashFunnel (New Media Holdings Ltd) is a software publisher located in Tel Aviv, Israel*. The company is a primary distributor of unwanted software. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
GlobalSign nv-sa

Valid from:
6/1/2015 12:03:11 PM

Valid to:
6/1/2016 12:03:11 PM

Subject:
CN=FlashFunnel (New Media Holdings Ltd), O=FlashFunnel (New Media Holdings Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121a5950398a4dc3d7e900c9a7b8cfb022f

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.NewMedia.NMH (M)
100.00%

1 / 68      (Adware)
icreinstall_point-blank-32-bits.exe (Web application by Program Installer soft)  (a62011fc14bec3aa3fc0349386765c90)

1 / 68      (Adware)
microsoft-powerpoint-32-bits.exe (Web app by Web Internet software)  (f79ac7b1172d84f85b6a40fa87befa9f)

1 / 68      (Adware)
icreinstall_java-runtime-32-bits.exe (Web app by Web Internet software)  (0e8bf5beb3c2900ab3b5c43f86d4d28a)

1 / 68      (Adware)
764f.tmp (Web app by Web Internet software)  (a0976172fce3479e07f82906d590b3f5)

1 / 68      (Adware)
icreinstall_popcorn-time.exe (Web app by Web Internet software)  (a6ec6a8b118fd51d72b10c1a44322b9f)

1 / 68      (Adware)
14ea.tmp (Web app by Web Internet software)  (ed5241e6a9028c39c25fa0d229131ee9)

1 / 68      (Adware)
need-for-speed-underground-2-32-bits.exe (Web Installer by Program)  (a3996dd91773b7faba7f3dd56f877b6a)

1 / 68      (Adware)
f82.tmp (Web application by Program Installer soft)  (fb57eb1b7943c39ec3b41d24d8395061)

1 / 68      (Adware)
lqdhcql7.exe (Web application by Program Installer soft)  (19b4175adb7b6c25e54aa0f1d59d1b38)

1 / 68      (Adware)
microsoft-powerpoint-viewer-2010-32-bits.exe (Installer Generic by Software)  (604125c0be2bc1ae10b7e120c99edb9a)

1 / 68      (Adware)
formatfactory-32-bits.exe (Web app by Web Internet software)  (9483838c14b96654daca980275a8694c)

1 / 68      (Adware)
ares-galaxy-32-bits.exe (Web by Software)  (9a385cba7985a469ef00043534a4b199)

1 / 68      (Adware)
windows-movie-maker-32-bits.exe (Web app by Web Internet software)  (cd0492a4adfc53e240fdc6ee0eebed74)

1 / 68      (Adware)
gimp-32-bits.exe (Web Installer by Program)  (b0dc53224c88dba0462cd12486057811)

1 / 68      (Adware)
quicktime-32-bits.exe (Installer Generic by Software)  (5ad00ad80552c2204812c648a3bd8258)

1 / 68      (Adware)
sothink-swf-decompiler-32-bits.exe (Web application by Program Installer soft)  (6fb23a2417c1f18d42725cbdb972015b)

1 / 68      (Adware)
microsoft-silverlight-32-bits.exe (Application Generic Software by Internet Installer)  (7be03b6f41d5baa2a7a0709ae9ca6a0e)

1 / 68      (Adware)
teamviewer-32-bits.exe (Web application by Program Installer soft)  (6e412c4eba97f9d99a4c8e5774dbef5f)

1 / 68      (Adware)
9209.tmp (Web application by Program Installer soft)  (3393ecb58304482afc477e936946fe87)

1 / 68      (Adware)
icreinstall_utorrent-portable-32-bits.exe (Web Installer by Program)  (c328c709f3b04b795a108ca4146c510c)

1 / 68      (Adware)
crazyclock-32-bits.exe (Web app by Web Internet software)  (d9e3c397c32f6d46bfe6c347858cdc5b)

1 / 68      (Adware)
icreinstall_slim-drivers-32-bits.exe555.exe (Web app by Web Internet software)  (87e5d27c1d94301db78f1620d9dc8636)

1 / 68      (Adware)
avscan-20170301-234623-233a3932 (Web application by Program Installer soft)  (400a0a471fd77f48392ccf12084088ef)

1 / 68      (Adware)
icreinstall_winzip-32-bits.exe (Web app by Web Internet software)  (146852edcaf0aea24176a77d948a1bd3)

1 / 68      (Adware)
3632.tmp (Web app by Web Internet software)  (52f2db22fb30e889289baed25d8cc739)

1 / 68      (Adware)
1338.tmp (Web Installer by Program)  (851d0482e59e4818c335731e047789b5)

1 / 68      (Adware)
ares-galaxy-32-bits.exe (Web Installer by Program)  (fd484c331c884bbec6b8887a0cd90c3d)

1 / 68      (Adware)
c069.tmp (Web Installer by Program)  (f5fb27465ccbaf370ca3d15f9849316b)

1 / 68      (Adware)
aebd.tmp (Web app by Web Internet software)  (73548749debfc0e74ffe23b9d50e999c)

1 / 68      (Adware)
minecraft-32-bits.exe (Web application by Program Installer soft)  (6852da0196188b28ffdce30c917f1bb4)

 
Latest 30 of 6,735 files

Downloads URLs for files signed by FlashFunnel (New Media Holdings Ltd).

1 / 68      (Adware)
http://www.downloadrepositorygift.com/c?x=MK39jY wS3WIJWcuwVInwB8j1E8erkQwc kH5USulWA=&c=GFYzXThC0qQxgCij7EEkaQWYcFxm0d2N0W npF2/ypxUmbsYPdckmMUpD0EXcM7Y1cAxjdjIUYhoJx7otHNxVimN2R2un0NCSN5KYWxSeHo3tm6h4Xe0PVHm00cFruaW2NB6CgjGh0nnQu1MnZ3q/Q==&downloadAs=windows-movie-maker-32-bits.exe&fallback_url=http://go.microsoft.com/fwlink/.../?LinkID=255475  (cd0492a4adfc53e240fdc6ee0eebed74)

1 / 68      (Adware)
http://www.signstowerranch.com/c?x=iLC9oRYkLP8ACObTwdq4PzQgoUIDvmHw6Lha4 9gxs=&c=fVQcU116asNUBiFb58FHTnxh7iuezh8Vvq440lV9A/Bbm5kp0X0AyVl8z59lCi2 oPpZzJeS07EWv5zdrBhEOOHfM4ZbJKuVI5Bir4dH xSayInp9Swqwgv32aB/xY4yfd wVTf3YS8iQzTb5RYFdw==&downloadAs=winrar-beta-32-bits.exe&fallback_url=http://www.rarsoft.com/.../wrar53b4br.exe  (148886cf91da0d20d0a9bc6e266d1fed)

The certificates below are also signed by FlashFunnel (New Media Holdings Ltd).

1121F8AB8657C7560B4A362EED0DA7D46562  (Mar 16, 2016 to Jul 02, 2017)

1121DF62995B705C263C7C1BB644682A9A73  (Dec 17, 2015 to Jun 01, 2016)

* Note, the details and description above are based on the code signing digital signature issued to FlashFunnel (New Media Holdings Ltd) by GlobalSign nv-sa on June 01, 2015 with the serial number '1121a5950398a4dc3d7e900c9a7b8cfb022f'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.