home

Media Theory (New Media Holdings Ltd)

Publisher Information

Media Theory (New Media Holdings Ltd) is a software developer located in Tel Aviv, Israel*. The company is a primary distributor of unwanted software. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 2:40:37 PM

Valid to:
5/25/2016 1:37:49 PM

Subject:
CN=Media Theory (New Media Holdings Ltd), O=Media Theory (New Media Holdings Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121bd0f36c17a22891a5a6a7219b63c83ba

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.NewMedia.NMH (M)
100.00%

1 / 68      (Adware)
cuttheropesetup.exe (Tugaka)  (a98f299cda187e5a0dc733180d6cc626)

1 / 68      (Adware)
nfscooldogs.exe (Tugaka)  (ce8f674d3ea5f3be6bcf8215f820adcc)

1 / 68      (Adware)
icreinstall_beetlebugsetup.exe (Tugaka)  (a9c67bd8b7a9325ecd2f0a61173f21bd)

1 / 68      (Adware)
heroesofhellas3setup.exe (Sohu)  (ec5d2b34b5c59ba326d07aaccff96e6c)

1 / 68      (Adware)
simajosetup.exe (Sohu)  (56038e9026ae1e273bca724fabe281c1)

1 / 68      (Adware)
dominiccranesetup.exe (Sohu)  (2f0b0b239e6db47ce26b53e146e5e387)

1 / 68      (Adware)
sealegendssetup.exe (Sohu)  (000ea91f8519ecf4e1129c5d59d7e65e)

1 / 68      (Adware)
alabamasmithsetup.exe (Sohu)  (ec666abf47674cd0c8a4dad340052d21)

1 / 68      (Adware)
escapefromriodejaneirosetup.exe (Sohu)  (54b1f6b6be7009f12edecd697a3ec386)

1 / 68      (Adware)
angelayoung2setup.exe (Sohu)  (e68a9ae5d9efd008cee56657ec52d052)

1 / 68      (Adware)
farmfrenzysetup.exe (Tugaka)  (c4b15b4033ac87fff5866406c08a44f6)

1 / 68      (Adware)
nfsfantasticdepth.exe (Tugaka)  (1c66272cc8e833eddb712a6c49b4766f)

1 / 68      (Adware)
icreinstall_nfsvintagefloral.exe (Tugaka)  (1d9269100e67296543bb7805f569835d)

1 / 68      (Adware)
flowersstory2setup.exe (Tugaka)  (a0e9e27f1558f454fabf2fed3008539f)

1 / 68      (Adware)
alexgordonsetup.exe (Tugaka)  (1f9787c6a8222101b25d7c7b5feeec53)

1 / 68      (Adware)
nfscherryblossomreflection.exe (Sohu)  (594677eac07bf5935cad1d1f7c8618d2)

1 / 68      (Adware)
nfswaterfalls01.exe (Tugaka)  (8cd839091159c43508f61762740b2752)

1 / 68      (Adware)
nfsjunglestream.exe (Tugaka)  (77e2f14265a080c59cff803af525d0d7)

1 / 68      (Adware)
icreinstall_nfsclock23.exe (Sohu)  (8c4423ebef910b951bfb555dc0ca2ecb)

1 / 68      (Adware)
parkingmaniasetup.exe (Sohu)  (b3ac303f5cfdc7df6de6d9b49365f781)

1 / 68      (Adware)
nfsfly.exe (Tugaka)  (27d5e47ab93054517aa95602090612ae)

1 / 68      (Adware)
romopolissetup.exe (Tugaka)  (67ec6f4fe3dcd9773a97295573dfef92)

1 / 68      (Adware)
heroesofhellas3setup.exe (Sohu)  (1110933d3ee05cac48f75c8efe64556b)

1 / 68      (Adware)
gemsswap2setup.exe (Tugaka)  (8e0ccf033e6518acd9b10396ab61cc08)

1 / 68      (Adware)
simajosetup.exe (Sohu)  (98436e52cc8bfc4883029794b3a8cb9b)

1 / 68      (Adware)
fireflowerwallpaper.exe (Sohu)  (583e344a8dec5c77a33737a6ac5eb9bf)

1 / 68      (Adware)
triosetup.exe (Sohu)  (3374a26597a4663b6c4d499e07e2b155)

1 / 68      (Adware)
strikeballsetup.exe (Sohu)  (121f362d9d5a18a0f836fb35ef362407)

1 / 68      (Adware)
enchantedcavern2setup.exe (Sohu)  (183180c6f06331351d9fb64b8dc04fed)

1 / 68      (Adware)
echoesofsorrowsetup.exe (Tugaka)  (990c6515d5f8cb9db873f88347d8ed21)

 
Latest 30 of 3,444 files

Downloads URLs for files signed by Media Theory (New Media Holdings Ltd).

1 / 68      (Adware)
http://www.townflashtours.com/c?x=ezUg869KSwvNYJy gnLK0XGrBaz7JkY6KVW694FTlCU=&c=14IZe0ijz5WbyFSLipWs6jEsliQPYaRmo m6WlZR7d/U8fFB8srkdNEXZSDJOUH/KcvYSI1d5lDsnfacRb vpV05Q4iLKEZMPT6Wrqcsqeyu4/WJfk1fl/ozxTXNO9inkA71gJbZBhxDAR7OlaDuE0VC4Q3s7ehNPpyQs85/Gdc=&e=0&downloadAs=nfsCoolDogs.exe&fallback_url=http://downloads.newfreescreensavers.com/screensavers/.../nfsCoolDogs.exe  (ce8f674d3ea5f3be6bcf8215f820adcc)

1 / 68      (Adware)
http://www.townflashtours.com/c?x=kDDj7tRBxyWx0uNChUjoMRX Jo19jy4vG9wNYkJJnIo=&c=Nlhi6J2En h/QEBL25cxpuYEzEJ1NGByRZoQE66l0SVINEUcg5dc1tMwdr3n/onTHDpwlkC /NVRpEO8BhVNJ0Lc54aInFMVXtyjZj3m6cHAEnQ/ckMNKHALSH9giHChhu4Y1en/XmeF014PwmRQ MulzfuglQw54/w7 3zuUsk=&e=0&downloadAs=SimajoSetup.exe&fallback_url=http://.../SimajoSetup.exe  (56038e9026ae1e273bca724fabe281c1)

1 / 68      (Adware)
http://www.townflashtours.com/c?x=m14H73YbK2mkQcIun73RuIttr67OutrUPek/ExHbwgk=&c=YhItDj5b/SHihssfhV9r21nLd7kgOO pU3bL4/ojv23Btc1okG0BL7282Umwvel2cXycAOc8ANvTm YJIcbAEOAxAaiPkxjL3defeYZRrTALxqWgFCDm91yQUq3yy0/a81uprvmuyT7AONihqFdhYnKreAlDTXePhJCQPX9ZhXk=&e=0&downloadAs=DominicCraneSetup.exe&fallback_url=http://.../DominicCraneSetup.exe  (2f0b0b239e6db47ce26b53e146e5e387)

1 / 68      (Adware)
http://www.townflashtours.com/c?x=Id4pfyPkA3 sPlTgEwOb9mCbkAUt793619Ni34iaHTs=&c=dXNz7gSvOfxRmfGbRlPmOsgB0GO72HQjKBZ8bn4Nq1sa5fDabEcPrlJYhSlBrLVNyKn0Fg1dUjxwPQFBIkBot54koRsYAos4TpGwFGVmds5zzqDsfpF9YLqiC3CIPoYHKRQBgC0mcWrDuLmDVPjF14aQzotIVxT/twKTX9yvBT0=&e=0&downloadAs=SeaLegendsSetup.exe&fallback_url=http://.../SeaLegendsSetup.exe  (000ea91f8519ecf4e1129c5d59d7e65e)

1 / 68      (Adware)
http://www.townflashtours.com/c?x=ZLS4nU3PzbC4574Wv9zhWYM2VvfluPHwHs0s1z7O9jY=&c=KYDvmnOMHPiIVpWgzZBoZk4EHAq3l2wq/jbGgAGFjBraOqsCxIlDSjjpgX g/yEZX84u7W90x6qXoVqIyaaczumx9yR6LBox5 76SZSEFmDerl dCddVeTvR2 yzanGO20nKBbYkF1jihmXJlZk9B15R95eBLzgNtA7/weUjqwI=&e=0&downloadAs=AlabamaSmithSetup.exe&fallback_url=http://.../AlabamaSmithSetup-fr.exe  (ec666abf47674cd0c8a4dad340052d21)

1 / 68      (Adware)
http://www.townflashtours.com/c?x=qxuBMY1jG VKqE1e 3l1Z3rMnQnlwFfX/rXgxibjUC0=&c=Fhw7znkSH8wIXFU81VTukmW3lQfa 3Az84nfe6w9EFu47R432v4 ew0hVXblzg3apczqHMM1UQ87Sj8I5FA64vg8mRIXPcrom4jjSWpjKyDS/NrhX5Sk2aJrxTxON/Nd0MpazgJAiRgqpn8zeno4qKtUVGBxs hjBWAimX3vd/c=&e=0&downloadAs=EscapeFromRioDeJaneiroSetup.exe&fallback_url=http://.../EscapeFromRioDeJaneiroSetup.exe  (54b1f6b6be7009f12edecd697a3ec386)

1 / 68      (Adware)
http://www.townflashtours.com/c?x=Efu2kzBDPc45dUsL5dUVBYyWu7FxFWHqhxM45RTKpAk=&c=aNy8vc0VCuCYwtFS jZNzL6/XRQLUeLcVaAaDbY3cgv9mNZ EZBOV9xnewiM25zslZPvVVczUvoHqYJEnOoJ3nYFYK7P/b6Tcqz7h0aWa0INKtB9xB7s noh6JeRBz 6uho3t6T7PjnZDagZ5qoguzDQSxTm2 rmArf7h16FUno=&e=0&downloadAs=AngelaYoung2Setup.exe&fallback_url=http://.../AngelaYoung2Setup.exe  (e68a9ae5d9efd008cee56657ec52d052)

1 / 68      (Adware)
http://www.townflashtours.com/c?x=L64r8E5eJIk0tV4xyXjXPajZFKWunoELGVt8PglZQr0=&c=E0Q4Fm 7RqK/x9Xj5xPNsh7EoG3 gSd73NiTsrtz3xfDCkxMLNyhB/fF /ohG/fiLSc3AWghDC5xvOYkRYglJS6HKFlx8D3TaFsRNXRw0Y00Rwe38Ek08kASipbAgnMr4u7kzoHnAHu1wPIo2YSwCwyYbm/wwQAPJVBGgIxrhk=&e=0&downloadAs=FarmFrenzySetup.exe&fallback_url=http://.../FarmFrenzySetup-de.exe  (c4b15b4033ac87fff5866406c08a44f6)

1 / 68      (Adware)
http://www.townflashtours.com/c?x=u6oJ7ed7RI1Dedaj3WnBuc7DulyL1HVbLyG3Mc8/nec=&c=bu32P9wkxqzrDY3k4vRwAYV5Z7DcDO7rxqkKw062XNmidnohROXomgAZ/RTHJIGqew1IlyPGzbQdFln5HSYOJBQjpBDrB2fkF3RXMEy6TDdS/CUoJ lEDrpgIsD13u1Zk7evazIhbzWf2 4SScc6hu0Wpmsad3siEAhBpdLVi44=&e=0&downloadAs=FlowersStory2Setup.exe&fallback_url=http://.../FlowersStory2Setup.exe  (a0e9e27f1558f454fabf2fed3008539f)

1 / 68      (Adware)
http://www.townflashtours.com/c?x=rwz9WEfpF/rk88VHN1rU22V1Mbw/tAvFO8o7x8a30ao=&c=b N8tHHPc EPgFVmeuhrOspmn0josHS0evltmidXvel0 sEF322yux18xTUD8jcIXW GW6Htuo0q4rCus644rQMNPLVMI0hHxPzT8NcHd6/z3GyJhL1JZsGbN2gumOpNG2WXOIf3TSoYJbLs51yP0w==&e=0&downloadAs=nfsCherryBlossomReflection.exe&fallback_url=http://downloads.newfreescreensavers.com/screensavers/.../nfsCherryBlossomReflection.exe  (594677eac07bf5935cad1d1f7c8618d2)

1 / 68      (Adware)
http://www.townflashtours.com/c?x=YF2lK1VaPFnZ1vk OdpeVRl3dgt/JUc13KzaN5xPcRA=&c=iOZGwCv 96qNoLplC8pTRgQ7V8sjhBRG eqI o4gd9CPGx1OPDYfYJQhjumV76hXz0ny2PHEqPNCXQ0dqe1Z917lSazZh8zHnsm2QMnvQfOsNwltaCNqscUMuTnPspzJgOUPcL5g4UfBRG6VptfbPduu2H7ELViVpGqLbRgHkwA=&e=0&downloadAs=nfsFly.exe&fallback_url=http://downloads.newfreescreensavers.com/screensavers/.../nfsFly.exe  (27d5e47ab93054517aa95602090612ae)

1 / 68      (Adware)
http://www.townflashtours.com/c?x=NllAF5otBgFYibx8ZKPTU0CKT6fh55gcETi4WF1GJOA=&c=zreU4uk2gf6AcwK3tkoMo72XJ1GB8VIXWCyjDhf9awUUnLQiCiP8k1HlCvkdmhLXiFuGm1b0QMN19AhZvG9NdnToHxRnd8q7vO1HOWX2ot9WEja8/nEOjD2InGTR EtNei6BpI GX/RZh24WCV0Gilp82cV4ddDZ14v/FUu E7s=&e=0&downloadAs=nfsStarsFly.exe&fallback_url=http://downloads.newfreescreensavers.com/screensavers/.../nfsStarsFly.exe  (bf20f62ff17a98981b3ca79fd61278fc)

1 / 68      (Adware)
http://www.townflashtours.com/c?x=dz0SlM I4Wz8FMfqvt2x0l5lh6/MDJOh5xYTxzA88jI=&c=7Ha7/1m7iCdm/VW42A4hzdy6pqmvh2oQSI51xV q9AtWY4PwX0MujDlxiFBadu054uBkUvcOQkbvKS3CHVTNxYvcRC2cv1quoPk7WlMdkG4 JsIDGll DT7UDJxIKqYaZ3XnJdgEtONsr0aQxt3SbzOHaxFWBSmyT9VqG9gpNZI=&e=0&downloadAs=FinalFortressSetup.exe&fallback_url=http://.../FinalFortressSetup.exe  (2e386c97f8f079d0c90ad04afc925c3e)

The certificates below are also signed by Media Theory (New Media Holdings Ltd).

1121D2E39D4EC3AFCCCD055C1E5FF64F2796  (Mar 15, 2016 to Jun 25, 2017)

1121BA944A31E4793A274CC4ADECFF1E7349  (May 25, 2015 to May 25, 2016)

* Note, the details and description above are based on the code signing digital signature issued to Media Theory (New Media Holdings Ltd) by GlobalSign nv-sa on December 17, 2015 with the serial number '1121bd0f36c17a22891a5a6a7219b63c83ba'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.