» OOO Creo Advert
Digital Signature
Analysis
Files (1,126)
Downloads (6)
Related (6)

OOO Creo Advert

Publisher Information

OOO Creo Advert is a software developer located in Moscow, Russia*. The company is a primary distributor of unwanted software.

Authority:

COMODO CA Limited

Valid from:

1/23/2015 7:00:00 AM

Valid to:

1/24/2016 6:59:59 AM

Subject:

CN=OOO Creo Advert, O=OOO Creo Advert, STREET=Prospect Volgogradskii 2, L=Moscow, S=Moscow, PostalCode=109316, C=RU

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

5ca28c3040b50169c6effe7ad594035d

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.installCore (M)

100.00%

1 / 68 (Adware)

adobe_flash_setup.exe (Web Installer by Internet) (a81f9ddf8832fcef6193b7907e9c5cf4)

1 / 68 (Adware)

adobe_flash_setup.exe (Web Installer by Internet) (7f13f451dae683f1b123576e49bf59f3)

1 / 68 (Adware)

xq0tbp_l.exe (Web by Application) (a1d36b94a917fb6f41923c0f490de130)

1 / 68 (Adware)

Setup.exe (Web Installer by Internet) (1059348f9735e81d2fd5865b8e7123aa)

1 / 68 (Adware)

Setup.exe (Program by Application) (1eab51a2b52eb6b285bc0486bb35b140)

1 / 68 (Adware)

adobe_flash_setup.exe (PreInstaller.NET) (1c77e0d44106ad5d26bda5af78b51780)

1 / 68 (Adware)

adobe_flash_player.exe (Web Installer by Internet) (37e1354d4d90eb477f7f9132a90c64c4)

1 / 68 (Adware)

adobe_flash_player.exe (Web Installer by Internet) (c92e3815f90ba196774efbca8e3d221f)

1 / 68 (Adware)

adobe_flash_setup.exe (Web by Application) (2c33a47d43e3885178f375101007e779)

1 / 68 (Adware)

adobe_flash_setup.exe (Program by Application) (ce9f7c20f98e818e2e9808fe8f3fd406)

1 / 68 (Adware)

adobe_flash_setup.exe (ebfde1f221e2f10200abfed08d53e891)

1 / 68 (Adware)

adobe_flash_setup.exe (Web Installer by Internet) (52773c20700eaee2943aecb699d1af62)

1 / 68 (Adware)

adobe_flash_setup.exe (Program by Application) (30e834ba827be3c21a48d5d28248befd)

1 / 68 (Adware)

adobe_flash_setup.exe (Web by Application) (2d7d60557c457a692c7478dd19147be3)

1 / 68 (Adware)

adobe_flash_setup.exe (PreInstaller.NET) (b0c638759fd444f596613a65e8114afc)

1 / 68 (Adware)

adobe_flash_setup.exe (PreInstaller.NET) (0decdfda3b42347c8c0f7da7c2fc086f)

1 / 68 (Adware)

adobe_flash_setup.exe (Program by Application) (2f4509e0ab29823a42796e5630a5a655)

1 / 68 (Adware)

adobe_flash_player.exe (Program by Application) (8b31f07e39756d9f11f2663442420f18)

1 / 68 (Adware)

adobe_flash_player.exe (Web Installer by Internet) (670a8906b100c3c20d366317ddccfe49)

1 / 68 (Adware)

adobe_flash_player.exe (Web Installer by Internet) (95163f635b89af5dc71ee7cc76fbc017)

1 / 68 (Adware)

Setup.exe (Web Installer by Internet) (24f455799de006dbb598b84ff4effad3)

1 / 68 (Adware)

adobe_flash_setup.exe (Web by Application) (d37adcb8beebba470c5bf48849875ffe)

1 / 68 (Adware)

adobe_flash_player.exe (Web Installer by Internet) (6d304a13aadd0af0f6159d2a0cbc1333)

1 / 68 (Adware)

adobe_flash_player.exe (Web Installer by Internet) (e476d17702c021cd0ee56a08a6e01b45)

1 / 68 (Adware)

adobe_flash_player.exe (Web Installer by Internet) (048fde752ece86c614e1674a8a82fc64)

1 / 68 (Adware)

adobe_flash_player.exe (Web Installer by Internet) (466de1505aacbe1a8db45e4e075fc0b4)

1 / 68 (Adware)

Setup.exe (Web Installer by Internet) (28957f56649705a9cddc8c9cfef3258b)

1 / 68 (Adware)

adobe_flash_setup.exe (Program by Application) (d731b3b6d55a8ee6285a40fcf9d43b13)

1 / 68 (Adware)

adobe_flash_player.exe (Web Installer by Internet) (8a70b1dcc41a519647b88b4669438856)

1 / 68 (Adware)

adobe_flash_setup.exe (Program by Application) (2e68c9c64ec67cfb7439450b9a593620)

Latest 30 of 1,126 files

Downloads URLs for files signed by OOO Creo Advert.

1 / 68 (Adware)

http://check4upgrade.how2safeupdate.org/dl.php?conversion_id=14314192110088&app_id=4&lp_id=376&v=ico&stub_id=231&v_id=RNzpbtzUBdbPEwMMfXeMjbqxMlQ2zAP8GK_-rlNjC_s.&pcl=IIBjkLnsfnr6ZmlwKXWAGo1_aO-uL_4TkdGJxsAv1oE.&CLICK_ID=zCpAnIE66Az-DG31LueJTypyqsXLmChW43yA55Yc1hF4Ggd2tx8devtRw8DL9WnJE1IxsHj5J7pglpJtF9VMKGaIgQ5e9tw94S84l3N5QZc9oN50P_J9jOXWdE0J-OOgxJemgOvV-VZ47b6PYG6TkRsbPd2dr1CRO0x6Y3xFANqYTWe2I5YrGeAuEWpcBTfhDgjDPYMpRjBWEefTUhTpoiH_jobG7JM53iXjR0TPBxUNkAS0wSbGmQmj220IrkuKUP8dhhvFcaoaDGkjDWTwwh0w2rj-boFaO0U9xWgaqA2pFzWs3Rl7tVqBcI9VUgBgPcOt-Y5VjxQYtYVqeYm84cO3XdQZhF2JQ3zf0EAp-0Qe3qiiIZJcKDJGMv5WrY-zrnuZ06_ucvekUY64HXpebvBKehqTey7VW3HM4_gdLyoUByxhAJe6KCjD8qVKjpcfrJ0 (adobe_flash_setup.exe)

1 / 68 (Adware)

http://check24.newcheck4updates.net/dl.php?conversion_id=14314410540966&app_id=4&lp_id=945&v=ico&stub_id=231&v_id=FQGd3iQj2edZtF8PZoKd_UM7ykpizap07QUPi4YuIPQ.&pcl=cwUcNQhsfOlznJDr4SW5vQAQ2WO1nGsa0EtSF2BFIMI.&CLICK_ID=3YumOd9GbPgfkNeIlFnqRpkWNW8QNqDVHRdPMVH-2jpfs7xlUyzTNDFVfugRkYfbUexadO0fFLhKmD7Kxh07g-KPeB9VKJE4RyWP6t7-4hnrwVy05Yysw2ke7gHMqR_YpNhLDz7KKBRBF2C2WqzXuUgb9wpbTiV465f03lMcbHHJrTsMWPUqMIWk_aytD9yK9i26HW4s4mZVTwvGGXIsZkuMOAOZNuOZV4TXVZnJ0lrxKSbavOFQXlSYixKlYX0hhEbI2vVgDye6cu_IAGmuse6O2JPhmalvK82-9OB3DCAbYE-hP8aSG-2RuhslMAq_OjrHxFN_2ACtA6aagdfWRVahrusAR3vFp81d2FxxYb6p_MsY0sSYElGobB4qyYqEsNL_xjCXmlMMZgx6duoJaKo4pvX9ArxM3v4nW4gJOcxLZUUkFhv5tmFbLMu9J0PKZr151w (adobe_flash_setup.exe)

1 / 68 (Adware)

http://softupdate.how2safeupdate.org/dl.php?conversion_id=14314444373617&app_id=4&lp_id=376&v=ico&stub_id=231&v_id=plIzkHcHAxRYZifAEYDtEp-H6rS9u9kQN8uax3psLmY.&pcl=IIBjkLnsfnr6ZmlwKXWAGo1_aO-uL_4TkdGJxsAv1oE.&CLICK_ID=yxMT1ApJEGCXkvc-ruFnbWv3_BM9ahSzvxGN5Ej_rn9WnNYCTW_5pikv22cXeVIpD0c1C1nG_dKCnYZLuxSGo4JdznPE1COtKFimoBi26rRKkLahda7pa9RYI0ciIbeIdoBL_UcgCBdVBiqB21QErYHd2CXZ3Xko8TXJEUFx1PEIWarNhvvIzga6WOsOxU7Y8hMRtjXKi2kB-5kdZisbHkb_qP9vidoWk-X95aszdMoHbR6p6EhGEF5PQyDlGVssgGFhhdO1sJIWRLV6oa6_39R-El-qRqiHqv-kJqKWneH2ipNZAAXRDaYhy1Nye6grUSQXaOAFmNVsDMazkDROHpyJ_BnIpcVd3BmT1FFT2qxuIO_Of8hypV031NAV2-62TAruavaEq9Qouf3GYAgy9IaWNX9V1Po0PmTJJGf6RrOxUnAwibElDg (adobe_flash_player.exe)

1 / 68 (Adware)

http://check4upgrade.how2safeupdate.org/dl.php?conversion_id=14314448403083&app_id=4&lp_id=468&v=ico&stub_id=231&v_id=dIkKPkNcMGsjpXajvveGeJ0PjO9CIJhCk28pbH08n2c.&pcl=cwUcNQhsfOlznJDr4SW5vQAQ2WO1nGsa0EtSF2BFIMI.&CLICK_ID=1QMON8ByGC7vIKn2Etvp2iGoIrUGiMlsHerXgOXWmYnCSsnvCcad1YhhY4asBycAsZMGYOkvVY13kjlNVXWCuI2L7_rn9oui_NA-M0a7XTlOgs4kODufJ9zwES7aMUbH2O5JK9WiAwafiyAEZ8-1E4efwVpy6K0xY1jfgUk_mqBye_fwJbtEJNF3f6uqOfAYSWfVTnpKiJHm0XEk9698uWA9F_RgeQGpbHpTmxfkSmEwqcqIo1QLxXrkjpJX7pjoaVaX_O4XYuMsEQlTdSJgXdpMawRF0ygsLEb9X5ERFjASQj1FUpeMRlpC3F6_Ct5C5I0fyBvBr-mBDgOqww9ojz14BjlW9ZU_AIMfYwVE7QY1lK-VD8wjcgLrqHQS9eByuIu21Pgdj_r6xwEXH06XN2adHvs_R4r6y1VyAMJIF5i4IHzGubL9J-gPJQ (adobe_flash_player.exe)

1 / 68 (Adware)

http://readynewsoft.theperferct24updater.net/dl.php?conversion_id=14314435669436&app_id=4&lp_id=376&v=ico&stub_id=231&v_id=JWJTdCK9284mbJsoTB76XQULYXvXTBRICOlSK3ja2kw.&pcl=IIBjkLnsfnr6ZmlwKXWAGo1_aO-uL_4TkdGJxsAv1oE.&CLICK_ID=bOnyXrj4UefuFx69M0Eky5VHbYMdWTWYtEAPcBrjsQqmDEOnYFtAPYd9XhzCVA5dxdyiBveKoChhovS6uslDfmGx3CwxMLyleE8alMZsijb2638YdNOf8ffIR47eZmkAPgTHQJHtQJqArgrxq1jzloCH6dBUfqzZjn1EdFw1SioULJm0njdQQbNgnqP-46-4H3GvHn5t4CUBC8lbtGSNozItYVhfvwDrn40n52jVWIVH4RzLuilWwFiEIILqtc7QbcrSlnxqMyVM0oorbgK5oetfEBEw9MvlMOE0cOjlUiVPxNyoSU-Cl4J-f4E66kzfNausGWbAlgdOob3SGHT9h20hRqIfz60k8tZFl0MACBVMT2PGRkx7INDG485WcwiQo8rQ2YoS_kE13APTeYHrsbSP65272NiDYiStxU_hC1-0sRSPOleA7EMywmxM-Ff6 (adobe_flash_player.exe)

1 / 68 (Adware)

http://check4upgrade.how2safeupdate.org/dl.php?conversion_id=14314758798115&app_id=4&lp_id=554&v=ico&stub_id=231&v_id=lJfCdm06Mdmo7lOIMS2FisxYQTg--aEmcDF-hT8VjO4.&pcl=IIBjkLnsfnr6ZmlwKXWAGo1_aO-uL_4TkdGJxsAv1oE.&CLICK_ID=hsHh0f6KoySyOAi5FYV-S8synPNr8qzNBqeeNUPQZsD8vPYgRn3V6B1_z1iKReb-ES9uw2G0gmyYheFqGg-3cBj-1WWR-6TTBlDbVWqW3m3-xG4V3hGZcqujU7MmTgSQVcZ34Gz_LWu6eGpT5BDZHIZ4EdvA1iKYbOknCCrshhxOb6W_6DhBCSSNI0uN8qo5pJqICXzaMRJj_EBE7wvP8chsuC3-RgbcFoJ9KVl6-j-V2dCxNnPWOh3-0nAw6MKWKKN3FAz5-27FjVE0kBpKjYM422fAoqRudooSZL8qF2eN2gHuaGtZysl9sykBi64Qzdc9PK9j9Gwy8fYBrhIhYbva_6DhT4RPndWkEyc6OkkYpm4gouvCNSRiwK0cW67MOD00zC6WtZbnxyIVh8ocTJUoIu0kF6OkWGWP-S2XtuzClz4p8tlPvZ0oq_BEcHa_3v5RPRNd9QaMHms (adobe_flash_player.exe)

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to OOO Creo Advert by COMODO CA Limited on January 23, 2015 with the serial number '5ca28c3040b50169c6effe7ad594035d'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.