home

FlashFunnel (New Media Holdings Ltd)

Publisher Information

FlashFunnel (New Media Holdings Ltd) is a software publisher located in Tel Aviv, Israel*. The company is a primary distributor of unwanted software. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
GlobalSign nv-sa

Valid from:
3/16/2016 5:53:00 PM

Valid to:
7/2/2017 5:03:11 PM

Subject:
CN=FlashFunnel (New Media Holdings Ltd), O=FlashFunnel (New Media Holdings Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121f8ab8657c7560b4a362eed0da7d46562

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.NewMedia.NMH (M)
100.00%

1 / 68      (Adware)
google-chrome.exe (Installation Wizard by SecuredDownload)  (f9bb7b5b594ccb57574965a6eec13cce)

1 / 68      (Adware)
partition-manager.exe (Installation Wizard by SecuredDownload)  (75cc5d5b38e9ee61556c3f2440b36c80)

1 / 68      (Adware)
ccleaner.exe (Installation Wizard by SecuredDownload)  (b221906a7b1193f70319a01da2e9abd2)

1 / 68      (Adware)
itunes.exe (Installation Wizard by SecuredDownload)  (44f7118ede6d1d2bb29f67bf2750fd23)

1 / 68      (Adware)
google-chromecast.exe (Installation Wizard by SecuredDownload)  (c9b579990ce1afdcfd6f56d1d5eff749)

1 / 68      (Adware)
icreinstall_apple-quicktime.exe (Installation Wizard by SecuredDownload)  (aea8ad47fd94d733cf6313e4858a466f)

1 / 68      (Adware)
google-desktop.exe (Installation Wizard by SecuredDownload)  (2d6133725d899821c89f450ad895bf44)

1 / 68      (Adware)
picasa.exe (Installation Wizard by SecuredDownload)  (e7e6e9b0496f814c4ee771a96cbcb43f)

1 / 68      (Adware)
google-earth.exe (Installation Wizard by SecuredDownload)  (083c1e59ada3cff0f2b0ed8968dd4cbf)

1 / 68      (Adware)
google-earth.exe (Installation Wizard by SecuredDownload)  (db129a8fed82482092ac1c1754dc6235)

1 / 68      (Adware)
google-earth.exe (Installation Wizard by SecuredDownload)  (342397414eacd638da604f648c8d0add)

1 / 68      (Adware)
google-earth.exe (Installation Wizard by SecuredDownload)  (369ff963c2f21014a25ec8ac73d04c44)

1 / 68      (Adware)
spotify.exe (Installation Wizard by SecuredDownload)  (4df87efcbd3c5e46cdb2b96f703e6218)

1 / 68      (Adware)
yandere-simulator.exe (Installation Wizard by SecuredDownload)  (b1a5cd384da8672d3aaa5a81da7b7616)

1 / 68      (Adware)
yandere-simulator.exe (Installation Wizard by SecuredDownload)  (f4d6adf58eb05fdc1d5ab69334051ed4)

1 / 68      (Adware)
chrome.exe (Installation Wizard by SecuredDownload)  (142eb302f736adbadd3c645c96e73a99)

1 / 68      (Adware)
vlc-player.exe (Installation Wizard by SecuredDownload)  (82ee96fcfc8a94f527086bcac249c38a)

1 / 68      (Adware)
openoffice.exe (Installation Wizard by SecuredDownload)  (38c18131a53ac589c0497efecabdae12)

1 / 68      (Adware)
google-desktop.exe (Installation Wizard by SecuredDownload)  (c53100b3db4a0aa898942f8434eecfda)

1 / 68      (Adware)
spotify.exe (Installation Wizard by SecuredDownload)  (d78e5c2a92f35aef3c5784ed8bb52fb5)

1 / 68      (Adware)
google-chrome.exe (Installation Wizard by SecuredDownload)  (2d5fb541b3b09b49e679f9b7eef66a5c)

1 / 68      (Adware)
safari-for-mac-and-windows.exe (Installation Wizard by SecuredDownload)  (6c35adde0bd00cfe0650388c0a191707)

1 / 68      (Adware)
yandere-simulator.exe (Installation Wizard by SecuredDownload)  (5ec80d2e8eab5234380b31c88ea525c4)

1 / 68      (Adware)
yandere-simulator.exe (Installation Wizard by SecuredDownload)  (d7216c9d093191d06e98f2a0f3f2f45b)

1 / 68      (Adware)
chrome.exe (Installation Wizard by SecuredDownload)  (b45d76251c700d5a1897bc0d855b4e61)

1 / 68      (Adware)
spybot-search-destroy.exe (Installation Wizard by SecuredDownload)  (fa33f05e57c1ab6180bab7212ae3a75e)

1 / 68      (Adware)
spybot-search-destroy.exe (Installation Wizard by SecuredDownload)  (3f11490f9ea69f1403f23ff4c3841769)

1 / 68      (Adware)
itunes.exe (Installation Wizard by SecuredDownload)  (2ee73b4c8257cfc79458bdaa04d3f935)

1 / 68      (Adware)
dosbox.exe (Installation Wizard by SecuredDownload)  (c1916b3543b3b001134ffe4ae6570613)

1 / 68      (Adware)
yahoo-messenger.exe (Installation Wizard by SecuredDownload)  (0b13458fa4c96616afc3ccb324d9561f)

 
Latest 30 of 123,238 files

Downloads URLs for files signed by FlashFunnel (New Media Holdings Ltd).

1 / 68      (Adware)
http://www.bitstagcontent.com/yyRc7zOsh7RR7GZe5Z66Opo6FrHtS7vp_v8_7sUX1ZV ebHJT2Kq1tiaho_K4LGyIJ6u9TNvSqivhs4JcLtspJZGH3rAWlTFc6mVha7YgMwf9xtYR0hOyCrOZH8I3sbmVXIA07VUDSBaO3b62bKT81am1sizB6wOVrfSEOD8lluJyJhqlPP_lFTfhjPHHOKiywubcukHkRAp0YZwBIAaMj3wSd8cvQ==-GzkAAMQ2RzH5HgjGcGFNcIPBBhw4FUhmA CwMXamgqN4Y0VJ1EjsWibc5iz4oWV53wRK Qk=  (picasa.exe)

1 / 68      (Adware)
http://www.towncurrentuniverse.com/8LWBhjhOogKTRSLjrmXhcSmI7quZ1sPz7gX8hsSYDyBJpZRXP7M1DYYIHrZxURLFqc2fdgUILWwga5lLvGmMOFR2HvHVZCYhWfDjAMBuiremxE29M h7Mnh3P7WjRr1ez7EUcKQjdg SIembfe6VL7H_osfPsqXENLu_nI3ceMiQrBnUdar jh8EBEYn_ UC00KPpaVzKHaJ6w8VgsciKSkDvUH5tsjCUzXsNsfLZqHeWgw1V_BcrbrD fGDK3rD4A5UcEOJAUE6JOdpzReWJ17OJu65sB8wx9xEvwp hNEEcKjPz45IVJmudpqWSon4JbHcBI4hAsN zGAqgZiQD1TSr52bSh2Z_2F1B3VhNb2FWorKwzHoRmA OWPS7vPs7 GMDU1QCm k4Ojfz 7SwzcjycBoaoAo1c8mdKLamnJz8faJiHzZBXeDqLfPPoqa0GwiwCEUpFUYgjzS1XKkmytsLFH66uafeI VHUl0Uo JedmY7fqEsorWMYRk304wqYbLrTbPyTcIKwRhGQvDeGKFYzMfTpVaIIBn3QEzcVQpGtbWabCR7Ip7v3TWPXyZ7vUAeMDT P3hDehcDhJ45Gi_NXF17FAGBq7iCTZSRdnNNr6rHDTSKU8Xk_3aaNMGRte0pIcDPzVgscCge_XjCvXV4RM4jK9l0i8IP6fuIFvYlSHe7FsPw2mb5Fy5F8Ax53ZStpodPGX9kGQqYv2Cx8HhpBk jJ qn_EoPms6Vjal vfyP_T4RUIIDCHU_J1jVwnOCwBN289_E8kb69hMSXPp3JJBg==-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA  (openoffice.exe)

1 / 68      (Adware)
http://www.towncurrentuniverse.com/kt7r8tm5XhAWc2rTN8EQ2BfGCNVajRbOFXjtIeoIdpIpPwcLMx2fC84hvd79oG_Xabdoz5IKbowL6SftrS4CSzAlH3JycothDK5xlpZJ5pKkOyquEptwm2XdVJxJJM8uLgKhPR_EOWiNh2KYQLA Ba9FYGq6vo4i26GeQKqpUgfisfFIJsvMH5Tj2HVfEZSwN6aHYrMFeAu9JuAhaGrQEh9xkudRrrtbSX0SOzbD0zs4DdQSTuirfUEszyUtU3UrlLXGH2FlH8J_T7svUTxudh8dF7lp5WxIK4cYTvRBEeTGEtoptYt0sDj3U7MJ_WiixxG6jqsxwr8zQoXg0zMrP9eLarTYpBltxelYUmGBCIrNKS5fU T9oNnTTg7 GPHR0F46WjtKBBHN2l6XJ7s6gdMRu4H_ux4NnWkBi70ET385OR2brWy9mEsVtBVJzXnqO8ULObxeEHQTCTyUJTpbSlpqi_SU8638XjlGEecYQn6Br0maCoGrUAPkqOyWfCMeO18qZEAHR0LO12q_LlvBRG5sTMhik1gFpJanFo14oNNOVS3XYmUDofpH4ChAiWr6sWmLEBUp9BR6RESfjeyPqeXPWw4LGA5PbKFa2fKh3QwHpXBDBgN054bwimXUg5W3zX5RCZRvyaMrDJ1w65xhhh17rB9UjsJDWLwaCIVRGMNkJYb9qPMzwd0qb39ZsgFO8K17_cS9gCZ9nSzbS8fpr1M688FgkjYKML0DgR5pO51iUBF5OHlsuOj MGfjgy5UHiw_w iyUjNM9hm dACMg_aDDXwnPzDaH ZJGqc8mdmT7qcdRPoGk9uB ILj9AVjq2gm8j7Q1lPNLuTVhnrmN2MlZLCCuCExwnzuQ_ Pa46SfLdI9qdvWqHIG_TaJa4NYScsEX7q gPq9YxNDEITwTao4HNd5lGXo1RRoFvsQlzwIemyoR4q vEgsrzF7sKUYs4Ko  (yandere-simulator.exe)

1 / 68      (Adware)
http://www.towncurrentuniverse.com/XYEpLxGkqp5VmAi08MYVugaq9KS6p3GSt0bc50KwtAFzK8UkDQdiz8OpTiNKLAdIudbT_s_9kRVMVxPBPNXN61ixtk LL9C5whPRr uPvUQWZnhikIkhdXtOSeOUBCmCJSb9egIcmZ q Qj0ppAhS8hxkjjvNjtP9x02VFj2 ihv3yNAQxPx9dxgldi8K3Qb2Lx1GgIgR2mv49fd50IDdO2soodubsSFc4gWN1p7Q2tJ2mo aKSVKECXiham0kguL qAVE8s_Hj8ZX2gY n7LQhkn8e2HAG1tLuPJZFtd0w1Kbn8MsEYwuqAcSBI0mKMyFtZiMTknQ3IuCXJTQ9vOyiQ57ha9KnVzB8IPoU2DWGfDgbOGHOfptdqg_z_Z43__u_ YCiAB24B5GOmolbk_uHljFWEX0I24pf_lWIwBT6CbYQC2e4fuj4EgLWpclBL_9Nv7SmEvcdoy30rWVVmSlp8dcc_b4ODmObiBxtXKHDmqInn4KFEBUOMZ3tieXklJrzofr0GYzySyxUZfnmY6hz jBnECKhSm8qK77B13nwliK6P_JMaQTZfwYaKd7aNJGF4ROH6j qpUtfLXTuz 0PB9iEZEDvogNkOUFx3n_phQiB0aNBD_4cP4TkPUJa PU0B1f5CDPg5sHoKIZUAjaVgajvYB685c2gBaLnrEgxOlMiquFJt778aA8L7g99VMCIaJaClHaHSK6WoEv3CrSADs1xcFSqLFz3ZAYermJNiM ikdaTnYsX_Vpx4maJrCMGtNEIZ-GzQAAMQuFxO843SnLyxkeWFFF2LIJBLpC9tA3FhRhBqJ wUWMOlz6y0pp_PsAA==  (dosbox.exe)

1 / 68      (Adware)
http://www.towncurrentuniverse.com/GVoTd9dc_l79J76ErP_qCcsWmFMNUZx2uRS2E76I6ek YiD4rmH nXsOzTp_QkLmRIoqfftU5d50gsVBfPpE1GEP2LDekPs4p4hh8SfNHeciOmo_M4GJJ2eciPnPqwcusOksJPPV2YSxuy SpVbY3gzGvTcrWlFx7qCnWnuAlRH6am3IWApXih56M0cFirb6eSnnHD 2Mdsi9HAeSoCXcb4tNa7bPuDCqe_pG3_OjD5jg1yjEennmBg9aGyhFeNV WU9yEq1ttH5pPxsmVFGLhLDddonOx1 lQq4RntCk_pPkw0TTeZgG78PwJM4tjZ0bwQLHc7D0H6uHCgyjjNxRf06UtFpDsg bPuqCOoS8f9pCGj4KWh_pBV5qha1jVUHR5BP8yO3jtgWdaYBIhKpncKbx8ySfKbHvRbGhkjMd54qKdcSvO_TU5xg38Yo4mi5mPpQBThF2HE5oKTJIReib eRW3wYQ8fqLgWO2xh_H3ySLUu8jdF1mPWtcyKCV5riqloy2mFbCnuy1qBXM8DA8CFD8VjmNYfNk5D33 oiszdrETopJyyq2tK58WnfKUx9qPF51hSyNLFrXZIqTK9t7V1tzyBmSGtZPmbBsyix4F6N_GVs2hXuirW6BEoWDU3LwgVzWzJ9Aso0mQ0t_QwS0edj2Cr9rXqqc0mXMRlpeBTIz26CHkbdO7NnaBbI7funqjes5IQmKwuOUU7 Ly5AtnP0qJl5Az_ymViDO8DlVC8vZ6Di4Fpnw3N5oVd4A9v9nwiVGus2GIDprFhmQRaIp3mGo7XX4A==-GzYAAES3eV5Op0TfXdARtEvqQgyZRCJ9YRuIGyvKWCPx2xkjp trv2NEohbUFw==  (mumble.exe)

1 / 68      (Adware)
http://www.towncurrentuniverse.com/KP1Q_jn_hltu_MBSkCUFQ8LUUIyFsa7J8gMG6upOzmK_k0ALrKvcwBC4BZybL8l2KdoLlkeq_3ck_kzpuJZSaqVKqqYLutv 566rmdOeiEldVHQZmBNPc43Mu8dZmche2mfDJKCU_1qa3pUAUGWoeN4Tpm9bLwPHAA_11HvjgB9fUfo_96fY2Nm1Ak40_Su3P6Nq7mgKRwQvBoA0I GLFT3_ES4VoEkF4Y6P0g1AUi3rxlmPYxjs4B3xE3g2AwFkeBvokJdhsA4vA9JE5R1st9zr3y p2XZjscMEV1E9N2cq_XuNYoYq1FKb4U10ofKA2mJ345maJ2x_9RT7K3YuRq9b1n1b_hnvgDt72YUwzsNVsahcvZByFHQIWfwyriD_fd99J05hm4nspu5jV0T7_C3FYPaPV1jvhKn4IWuyGDuQypmHCzvkVp4EwjFdT7cQqQxlpdwdLt2aQxa7QrIidO5gyJWz 6yn2zEMPH3IKUb0hzt7SxY1uZDHyJirz6Q EgGiLn8A3HbWOeaq3bMC7iiCMzoucYTtUHUyltuateE2oQFiLhNyJsTFwfOTUbxNH8o_YiYBCUCAbgKQKsiPReYjXqmpHqRL8VqkGlXkKIKDRCejHlCTUr2wpmQGbZ1HdCXhpxyR9fv0Jp9bxuLEG6wLef8Zj5gojrmkJxrL8t2rsMjzT4cEQZkQTOj_RQfuqjM8MR_KchsOVMZMWfFiPKjjitvUhQomzIBTuob_23uVm2QV3iDQQMU0foyfUo_sHgxeADrCN_Oz0CR9VhA5goc0wIsCfIE7eAgDqa3ezg9OBhu5gKUk5gpcsq5EpYpSN_ 9Wq1LNNXUtRBawwkretAKiL14PvFZR1p58e23ym3QF93fDW QT43zHzUHyG_7rHXFjP1gQbskIyAsgyZjZr2YhElj5Ayt8BUmwEw5BSSp vhISe2_ nPaou5_gnm9xU5NE  (yandere-simulator.exe)

The certificates below are also signed by FlashFunnel (New Media Holdings Ltd).

1121A5950398A4DC3D7E900C9A7B8CFB022F  (Jun 01, 2015 to Jun 01, 2016)

1121DF62995B705C263C7C1BB644682A9A73  (Dec 17, 2015 to Jun 01, 2016)

* Note, the details and description above are based on the code signing digital signature issued to FlashFunnel (New Media Holdings Ltd) by GlobalSign nv-sa on March 16, 2016 with the serial number '1121f8ab8657c7560b4a362eed0da7d46562'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.