home

FlashFunnel (New Media Holdings Ltd)

Publisher Information

FlashFunnel (New Media Holdings Ltd) is a software publisher located in Tel Aviv, Israel*. The company is a primary distributor of unwanted software. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 7:30:20 AM

Valid to:
6/1/2016 10:03:11 AM

Subject:
CN=FlashFunnel (New Media Holdings Ltd), O=FlashFunnel (New Media Holdings Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121df62995b705c263c7c1bb644682a9a73

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.NewMedia.NMH (M)
100.00%

1 / 68      (Adware)
bandicam.exe (Getetese by Baheb)  (89f48ea4eda4eca5b0dacab3ba9309bf)

1 / 68      (Adware)
libreoffice setup.exe (Getetese by Baheb)  (3c310fd66044d1f8efc874825e5bda6d)

1 / 68      (Adware)
tango setup.exe (Getetese by Baheb)  (fe9258b72a78a0468545896128695c34)

1 / 68      (Adware)
bejeweled 3 setup.exe (Getetese by Baheb)  (9ad7d2d2521db782c1c368a9a2966542)

1 / 68      (Adware)
clipgrab setup.exe (Getetese by Baheb)  (ec2cf38d8422e43ee4c2c62aca0598aa)

1 / 68      (Adware)
tango setup.exe (Getetese by Baheb)  (c674e9a6cb68ca5c3bc5bca14157ad70)

1 / 68      (Adware)
icreinstall_dashlane setup.exe (Getetese by Baheb)  (bd19ede4164d89606b477411246bfd8a)

1 / 68      (Adware)
google chrome.exe (Getetese by Baheb)  (7ae805e45533c470a57eb13fa0277ad2)

1 / 68      (Adware)
toribash setup.exe (Getetese by Baheb)  (eabe79b4c93b70fa01f0b3263bc82e9f)

1 / 68      (Adware)
utorrent setup.exe (Getetese by Baheb)  (28d718f4840fe9c228c176793568bdae)

1 / 68      (Adware)
teamviewer setup.exe (Getetese by Baheb)  (61b3061b47aab6160002d1b479795d11)

1 / 68      (Adware)
viber setup.exe (Getetese by Baheb)  (76955371fb8fd31ee2996b64918a75de)

1 / 68      (Adware)
kingsoft office setup.exe (Getetese by Baheb)  (13021009643018320117c20450b4e489)

1 / 68      (Adware)
audacity setup.exe (Getetese by Baheb)  (84badc99a1e931a04a509cfaa946fe15)

1 / 68      (Adware)
tango setup.exe (Getetese by Baheb)  (b4c0637ed0a8ae673b44555da7e0783b)

1 / 68      (Adware)
c.exe (Getetese by Baheb)  (b4414a70d275e824b8614fbc65c0b783)

1 / 68      (Adware)
adwcleaner setup.exe (Getetese by Baheb)  (a18cc7c5fce278456fa6481fc437ce47)

1 / 68      (Adware)
ashampoo burning studio setup.exe (Getetese by Baheb)  (f9f4e0794842afcf0fe87b139cbefb51)

1 / 68      (Adware)
poweriso setup.exe (Getetese by Baheb)  (de7a92a4911b20347ac446f0358fda89)

1 / 68      (Adware)
itunes.exe (Getetese by Baheb)  (f97798258c30647359b728812f94ffb7)

1 / 68      (Adware)
tango setup.exe (Getetese by Baheb)  (1111c6f9f476e65f8fa3666bb67a4a93)

1 / 68      (Adware)
frostwire.exe (Getetese by Baheb)  (44d2f564581ce39a9409bc261dd1f8ac)

1 / 68      (Adware)
icreinstall_teamspeak.exe (Getetese by Baheb)  (4f7f16b5ecb2a1b1e8e8537cc8b12a1d)

1 / 68      (Adware)
bittorrent setup.exe (Getetese by Baheb)  (9f9a628924536f6c6c184db321f80b01)

1 / 68      (Adware)
league of legends setup.exe (Getetese by Baheb)  (7e8792476678bdcfd3bdb60c20954ed2)

1 / 68      (Adware)
clipgrab setup.exe (Getetese by Baheb)  (6bf05cdc5ef9e99adca70d6df1a08797)

1 / 68      (Adware)
opera setup.exe (Getetese by Baheb)  (c426b0f74178f9d7fda4c5a3d90917f7)

1 / 68      (Adware)
opera.exe (Getetese by Baheb)  (2f67034ca7ae8ddb6de6f8014f962a2f)

1 / 68      (Adware)
ventrilo setup.exe (Getetese by Baheb)  (31385f6db54a00fd66f355e2b54a3f84)

1 / 68      (Adware)
daemon tools setup.exe (Getetese by Baheb)  (427d5b3dceacba1486e7b14a305b63ea)

 
Latest 30 of 1,691 files

Downloads URLs for files signed by FlashFunnel (New Media Holdings Ltd).

1 / 68      (Adware)
http://www.todaysendsoftware.com/c?x=qBJ9UbEQKLDdgYe/igOL8/etN5TTxz5RnDwL0Z KSZg=&c=eWLnAKJTDPgPVUzoA q4sGniFvBHeTWNCX4rNjqQ/jTXvUma3lTzcYEP6oVPkPS9pfXkCu5CU4JjHy21qDzBz6FdpCrgbn5APvtGyJLMZXYnzhT6JysqWzKx605QtWKk&downloadAs=Bejeweled 3 Setup.exe&fallback_url=http://www.onlyfreedownloads.com/landing/bing3/.../download.php  (9ad7d2d2521db782c1c368a9a2966542)

1 / 68      (Adware)
http://tango.todownload.com/get/file/id/.../?lp=adwords&tg=us&kw=1&mt=e&ad=52563133638&pl=&ds=s&uid=14100544401ae90d5de2be9fb7848f0fb7da4d168e&_ga=422094782.1410054440&gclid=Cj0KEQjw4aqgBRCvwLDi_8Tc54YBEiQAs6DLvBeAp1CU53FFTUZE4fjgPOAW9FEe1w6x572tWS1EPlMaAiet8P8HAQ  (tango setup.exe)

1 / 68      (Adware)
http://www.capitalvaultsbits.com/c?x=uO4vqgD7MaMhfK2T8vw79YeXD9kHqVARO00SmmM6pzE=&c=J7TRmMnDV/UdgFpFh6IE8/wB ZQtWrGWilaSar91jR7vUiEVdPs/7Rw1O9mUaS1boM7MRLChx59gWOs81h9lzRqgqv DHrPjwaQwGnmc9OVAkDrxXXU2Uravy9ltTeeI&downloadAs=League of Legends Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php  (7e8792476678bdcfd3bdb60c20954ed2)

1 / 68      (Adware)
http://www.capitalvaultsbits.com/c?x=OsV1U0xeRVA6uFXDVQgGXHmlk54q2ZD2OsD80wtmi6o=&c=zakbs8YDqHxZiVEQpc0efXp0636GAYrLhXdgNBgr Ocja3qkxGNmpSWz5DcY7AhTwovnUSC16PybU3T9vbbYN8PYjMGfMkEqt1DUpP2sDaW1aZJW7VFm9HlT18JxOiSB&downloadAs=DAEMON Tools Setup.exe&fallback_url=http://www.downloadfree6.com/landers/.../download.php  (427d5b3dceacba1486e7b14a305b63ea)

1 / 68      (Adware)
http://www.capitalvaultsbits.com/c?x=mvTy6uvetUrKICvSFGlY4XxZcu4euKc1ax Bec0Iy08=&c=rZMFNp88yukjlXDLFC RUcgZWoNYxMsPBfqE IS32koMQLMcNHd 3yRidn3y606g9jEOJOs507hvKhOGlKjC4Xk7SPSBhhrOp694mFoP38AnmBc2 rS0fq8bNrqvH/NQ&downloadAs=Tango Setup.exe&fallback_url=http://www.onlyfreedownloads.com/landing/bing3/.../download.php  (ad6c8a088019b8b522300634bb1f7a7d)

The certificates below are also signed by FlashFunnel (New Media Holdings Ltd).

1121F8AB8657C7560B4A362EED0DA7D46562  (Mar 16, 2016 to Jul 02, 2017)

1121A5950398A4DC3D7E900C9A7B8CFB022F  (Jun 01, 2015 to Jun 01, 2016)

* Note, the details and description above are based on the code signing digital signature issued to FlashFunnel (New Media Holdings Ltd) by GlobalSign nv-sa on December 17, 2015 with the serial number '1121df62995b705c263c7c1bb644682a9a73'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.