home

SpeedyConnector (New Media Holdings Ltd)

Publisher Information

SpeedyConnector (New Media Holdings Ltd) is a software publisher located in Tel Aviv, Israel*. The company is a primary distributor of unwanted software. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 1:26:02 PM

Valid to:
6/1/2016 4:25:43 PM

Subject:
CN=SpeedyConnector (New Media Holdings Ltd), O=SpeedyConnector (New Media Holdings Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121179e69998acf51fcd44cb8e805f29ade

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.NewMedia.NMH (M)
100.00%

1 / 68      (Adware)
opera.exe (Nagituc)  (13f037d53c3b9061c21442857d48b445)

1 / 68      (Adware)
moborobo.exe (Negusu)  (799dc832ee6e227e089585b1881dc5d6)

1 / 68      (Adware)
zedge.exe (Negusu)  (00c7b484210c75d7cd6188da91d1ccae)

1 / 68      (Adware)
geometry_dash_lite.exe (Dep)  (d98f1007ff0b5ee0753034e079601dec)

1 / 68      (Adware)
icreinstall_athan_(azan).exe (Daho)  (c44686db9b479b0bcc0269c10b3f482b)

1 / 68      (Adware)
grand_theft_auto-_san_andreas_patch.exe (Daho)  (1ba63962f3004b6c7f84f316cc0d2ac6)

1 / 68      (Adware)
icreinstall_dofus.exe (Negusu)  (ca8ef0253999a0a311cc0b71e2ca876f)

1 / 68      (Adware)
pou.exe (Nagituc)  (ee3c7d26cea08e4ac4598dc28b6000d6)

1 / 68      (Adware)
imo.exe (Nagituc)  (a85923e64cc3a5c21901889169818e85)

1 / 68      (Adware)
happy_wheels.exe (Bihigamule)  (d3894de96916098ad21a680706efb347)

1 / 68      (Adware)
mx_player.exe (Negusu)  (53e69fea097ea8a9f2a2e10f34945485)

1 / 68      (Adware)
painttool_sai.exe (Rolure by Somaca)  (3dc1605d94ddd9add621d464dca5f77f)

1 / 68      (Adware)
tunein_radio.exe (Negusu)  (4696392b0b792ece552bf86c1be675fd)

1 / 68      (Adware)
fifa_15.exe (Rolure by Somaca)  (b704f4c5ead350caddfcf055252ce609)

1 / 68      (Adware)
geometry_dash_lite.exe (Negusu)  (f5b30b5ba6f0e11427ffec5ef6a6c2d0)

1 / 68      (Adware)
htc_sync.exe (Daho)  (2e82f8636d7a35780716f0b97f6d88ca)

1 / 68      (Adware)
train_simulator.exe (Daho)  (651d2fcc3ed00b833663dfe6183bbbd2)

1 / 68      (Adware)
icreinstall_flipagram.exe (Negusu)  (4ccbddcef887c2dfb3b6e22f911cb549)

1 / 68      (Adware)
icreinstall_picsart_photo_studio.exe (Rolure by Somaca)  (b6b36d41f53c7cbd279106841bc2f3c7)

1 / 68      (Adware)
ccleaner.exe (Negusu)  (c449cd4a50c7a2ca81f3be1f0462820f)

1 / 68      (Adware)
cyberlink_powerdirector.exe (Negusu)  (74b2c3a7c2ef667ec2ede689f13ce914)

1 / 68      (Adware)
avg_anti_virus_free_edition.exe (Negusu)  (800d66be3424606b146145e479e88a6f)

1 / 68      (Adware)
hearthstone.exe (Dep)  (dbdf80ac8dcf07630ba83864497dc052)

1 / 68      (Adware)
adblock_plus_pour_chrome.exe (Pamanigera)  (77bf17300e6965b14ee563b05794e51e)

1 / 68      (Adware)
winamp.exe (Negusu)  (0987ce673a34a71d81435f502861fc20)

1 / 68      (Adware)
dayz -0e9ee851-da04-4eb2-9ee5-b331abf7a769.exe (Daho)  (7eeb8c43ac86b5b3eaeaeb0875f18b8d)

1 / 68      (Adware)
icreinstall_snagit.exe (Dep)  (5cc7552e648f0000a79c91d4224e3c7f)

1 / 68      (Adware)
surgeon_simulator_2013.exe (Negusu)  (4100d16c3c547ba6043cc99014b3c3f3)

1 / 68      (Adware)
h1z1.exe (Rolure by Somaca)  (7036694ec5a585918893b85c28415baa)

1 / 68      (Adware)
daemon_tools.exe (Nagituc)  (6b7ab3595d46001ef6148b7ddaa04d33)

 
Latest 30 of 1,270 files

Downloads URLs for files signed by SpeedyConnector (New Media Holdings Ltd).

1 / 68      (Adware)
http://www.currentapplicationsvault.com/c?x=8A8zl9gBIO QQyvmRFyKROcB5/XxApUzrpknGLXIkqU=&c=HjD0BOBO88dX9oFXH9En7ydaY08HrolVt0tkZq10F4lF0XW6NVB45Etcrtt7kA0I884 mEu/.../OukAlviU6p1fjRjSM0pytXNiFaItP13x8gkUeNY 7f0qcpw5mxtWmPrrKbDritjZ6LO3kQ6Tt6MCrqv9kBg=&e=0&downloadAs=Geometry_Dash_Lite&fallback_url=Fallback URL  (geometry_dash_lite.exe)

1 / 68      (Adware)
http://www.newuniversesafe.com/c?x=S40 Xu1fISYEpvwR2wqXTWCdlB38f8iGKstgUPKxNis=&c=qQ0zzXLRGSZ P9 3i9xHqgwLCVNDzuWy52r cvAcz52H YdJNrIJB1pw6cEFG4diQDKwJb7caEHjnYjJ6jA3CGZdKQiXMYr2JQ//jrXtajfId/.../  (pou.exe)

1 / 68      (Adware)
http://www.currentapplicationsvault.com/c?x=EUnmoDHXMKoGMXlAWWIDPooMuP5W6FYdV8AerjBJls0=&c=QJTwprIVgFWRak5m7SkvghdhVXnC//ErlmyXghWWtb4tveo2JP8UOxVeNZ4BRIinou2DZ1kWq52w0JCFX2du/IIhVrQFWE 2PPnw5I84VWFHVdoOO5Btvou3DiJ1OYGoeHInf4piKvxcdt64fWnM/.../jSzxM=&e=0&downloadAs=TuneIn_Radio&fallback_url=Fallback URL  (tunein_radio.exe)

1 / 68      (Adware)
http://www.currentapplicationsvault.com/c?x=GHMZI7pIS0WmVBLugLezgpHtnUVZxGbiVF86b9vXmv0=&c=PoBwEM8NwgYb6IbigetYm7BEFjqdO9Hny8sqFAswhFkgXwv tfsjBmrJzCo9hUX9UaMFVZZ0BaVw5lPKJ4Qnm0GFCIV4F79imNR BXLXh8 SK44NxRDybgRJDTBjQdRk&downloadAs=AVG_Anti_Virus_Free_Edition&fallback_url=Fallback URL  (avg_anti_virus_free_edition.exe)

1 / 68      (Adware)
http://www.newuniversesafe.com/c?x=pVa5u1C9tKm9lY1fMQecW9Y2D0JYw4hhJp9Mf2mGxMM=&c=m0Srj3 SIn6m/F/ortN8aaEX16V/CwCn DCjYZkTQkqVUBA3ELlDW2WyNg8JKfa0CZUUgC8dVHK26ZR0kvUWOxcu/.../  (daemon_tools.exe)

1 / 68      (Adware)
http://www.currentapplicationsvault.com/c?x=1Sji8tQ0apz8areB4iN41nBpBtLPEnTLyvPXB/20s k=&c=avCLpTvHycI6GGPJAQveibltpZHoAME46w nauc59pH0JK4zWvE7ve0Bzw F5BdqnRvC5IeuziNzQg39EvaU8bmO38Hpv7LukECd3JK 19h4iXeiaEf47fSoZLyIV6lBp1M5LUFZ5MkmQdm2XnP/.../&e=0&downloadAs=Tor_Browser&fallback_url=Fallback URL  (tor_browser.exe)

1 / 68      (Adware)
http://www.currentapplicationsvault.com/c?x=BGEQw77XZmLw d68tIz6Seo1vAj2EJ6EJpz5oOarwk=&c=aCDd0D1ZUDiv6mujf/.../A8zzfEU1j39Owl176TkT3cCZvrEJl74AvdjaD2o n2CRNdcqCvchKjnovb86fykU7eF6DoD6D7PEkKJEQ6Izre5&downloadAs=Mp3_Rocket&fallback_url=Fallback URL  (mp3_rocket.exe)

1 / 68      (Adware)
http://www.newuniversesafe.com/c?x=BdChkKoKa9I2bJda0sUUMSSnbx2QAUYD4ajZyqXyr3Y=&c=cNDq0fRFdBemBh1J4yRqf sQ/.../xPXxU1OyjQokxMtWPKY956d9v3jtrt q7ckm9qXgI0RnJjWdqp6aM0T6KYOqEfCeXN&downloadAs=Quran_Auto_Reciter&fallback_url=Fallback URL  (quran_auto_reciter.exe)

1 / 68      (Adware)
http://www.currentapplicationsvault.com/c?x=lw98ViQSZ4GccGEoKgaF3OAQLmsQST4bHi8aBmo6cJw=&c=6BnHAWWw AehPVECh6Ww3XUne xZVaX/.../SafEzS4SzdqKoEqHjFXWaz2siOZRsBiebiy VK 3Pi8M EVJpMLBKWtVMJYvWIUuxQhitiL3cgOfYUR8VJPg9x6vqa1lyUSTh17VA 505iVWIuemwG4GPOf&e=0&downloadAs=Counter_Strike_Global_Offensive&fallback_url=Fallback URL  (counter_strike_global_offensive.exe)

1 / 68      (Adware)
http://www.currentapplicationsvault.com/c?x=oINTA2vknTyTH9W52bbgFNo3wmKxsSSU8/UZN/25ZwE=&c=FSfVL3VhVlCfqllMB86kRySEHUs6XMfDuO2efon50phi5ilXnNik5AFpb6SctCy0thbtuLS34XMpo1PIGhL8IbQ8if/lv9Pqez2Ewbndm8wyZoyoD/.../Uo3oDdngL3o vNYbuwjOjW5mWU&e=0&downloadAs=VirtualDJ&fallback_url=Fallback URL  (virtualdj.exe)

1 / 68      (Adware)
http://www.currentapplicationsvault.com/c?x=pL3g5zqadagRcDMhmCE6eg69yP5wohs/Xusyv3QDQc8=&c=EeKAdKgZBo7pPS5QS5 mHjuTEghMvoh0gCfkDZVvj1mNgNWd/wFL2fxsaZy57MihqsNBK2CxvCpbY0EHL5tkVrXjmjTG/.../6zweYkZ8yc5dh4Wip5pXd87ZjKSDv e2c GTOhmLZ8S2yT3A=&e=0&downloadAs=Grand_Theft_Auto:_San_Andreas_Patch&fallback_url=Fallback URL  (grand_theft_auto-_san_andreas_patch.exe)

The certificates below are also signed by SpeedyConnector (New Media Holdings Ltd).

1121FD2D6EA2DEFFFFC3698923DA733CCD42  (Mar 08, 2016 to Jul 02, 2017)

1121E4FD792227B04E09C4A42F17E6E98404  (Jun 01, 2015 to Jun 01, 2016)

* Note, the details and description above are based on the code signing digital signature issued to SpeedyConnector (New Media Holdings Ltd) by GlobalSign nv-sa on December 17, 2015 with the serial number '1121179e69998acf51fcd44cb8e805f29ade'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.