home

C.M.A.A.G Proactive And Investments Ltd

Publisher Information

C.M.A.A.G Proactive And Investments Ltd is a software developer located in TEL AVIV-JAFFA, Israel*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
COMODO CA Limited

Valid from:
11/11/2015 1:00:00 AM

Valid to:
11/11/2016 12:59:59 AM

Subject:
CN=C.M.A.A.G Proactive And Investments Ltd, O=C.M.A.A.G Proactive And Investments Ltd, STREET=3 Mikonis Shmuel, L=TEL AVIV-JAFFA, S=Israel, PostalCode=6777212, C=IL

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
42bf94673750af4a912ba52f4f25c320

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore (M), PUP.InstallCore.IM (L)
100.00%

1 / 68      (PUP)
windows_media_player.exe (Meresa by Femadih)  (d04e5bad90c19d5d3fa6e586d78eba5e)

1 / 68      (PUP)
candy_crush_saga.exe (Refa)  (9fc145bb70816758739484937c846b60)

1 / 68      (PUP)
total_video_converter_1.exe (Deso)  (548fa73dbf3743164dcc9695dc01e531)

1 / 68      (PUP)
typingmaster.exe (Kusulocic)  (dde4af34554b497bd140d8ffc24fcf68)

1 / 68      (PUP)
microsoft_word.exe (Kicenabob by Sagemen)  (c9634e6cdb5c542b0e35ee86edbd500e)

1 / 68      (PUP)
microsoft_excel.exe (Kicenabob by Sagemen)  (15c1d697a95726f12cd6b2caf347cc7d)

1 / 68      (PUP)
bearshare.exe (Deso)  (af7e463d9568ac245e37ba967e554f29)

1 / 68      (PUP)
limewire_music.exe (Roda by Tom)  (401c06005d197d37438a7a6688d95167)

1 / 68      (PUP)
cafe_english.exe (Deso)  (a607ba68847fb24cb9aea8f5a496092b)

1 / 68      (PUP)
winrar_64_bit.exe (Kusulocic)  (163fce9bc59b8d689b6c5e7acfbc23f2)

1 / 68      (PUP)
microsoft_excel.exe (Kicenabob by Sagemen)  (2f9a16b372cacbc0735e7ec34131f6ae)

1 / 68      (PUP)
age_of_empires_ii_-_the_age_of_kings.exe (Deso)  (2ebbb545ba97104aca5ea7e2ab3ef0b9)

1 / 68      (PUP)
picasa.exe (Deso)  (2fbbe619c229d539bac6940542a887a8)

1 / 68      (PUP)
poweriso.exe (Pone by Mopobicome)  (93c355bab0776fc470f9deff9875ceb8)

1 / 68      (PUP)
microsoft_publisher.exe (Meresa by Femadih)  (6a048087bbb78e25e960008016d8f1c6)

1 / 68      (PUP)
icreinstall_kmplayer.exe (Lob)  (4897252190b01ce51312dcbadbbbc04a)

1 / 68      (PUP)
icreinstall_java_runtime_environment_-jre.exe (Horapuk by Memunen)  (2d00607d525070e401c60a71a7dd1d9f)

1 / 68      (PUP)
microsoft_excel.exe (Lob)  (d419c9f9ca6cbdceb6cc027fa1b8eb00)

1 / 68      (PUP)
audio_player.exe (Kusulocic)  (ca9d39fd0d3ae3894b56e960c83f945f)

1 / 68      (PUP)
frostwire.exe (Pone by Mopobicome)  (32dd3c89de311b7ef309650bfa698442)

1 / 68      (PUP)
windows_movie_maker.exe (Sanucehil by Nemam)  (b25796a131cd517b8492c1789096856b)

1 / 68      (PUP)
dll-files_fixer.exe (Deso)  (6aa7744ab14a3da4207abc1bd5a151dd)

1 / 68      (PUP)
poweriso.exe (Bitatapep by Nuse)  (048bcd8fea06d407109a0969ed450646)

1 / 68      (PUP)
itunes.exe (Bitatapep by Nuse)  (2cf045454d2d08589559528d8fe28a44)

1 / 68      (PUP)
microsoft_excel.exe (Kicenabob by Sagemen)  (aabb7847e26f43055ba368dd629a17ea)

1 / 68      (PUP)
paperport.exe (Deso)  (2ed007ad5523afd01b0aa086769e97a8)

1 / 68      (PUP)
ea_sports_cricket.exe (Hafat by Lim)  (779d76475bb4cdddebac6f3548eb4c4f)

1 / 68      (PUP)
whatsapp.exe (Kusulocic)  (f49a97dbee57cefddc67539802899a91)

1 / 68      (PUP)
minecraft.exe (Lob)  (d9b3cf4e60e07f0cd80bc9f3797d586e)

1 / 68      (PUP)
icreinstall_google_earth.exe (Derud)  (0ad07e383a7c7e47091b07f458ef5165)

 
Latest 30 of 22,101 files

Downloads URLs for files signed by C.M.A.A.G Proactive And Investments Ltd.

1 / 68      (PUP)
http://www.towersstockfiles.com/cR9DEvpmFCc1pWaCYJ0B6rE5Q_AvyOtT1gykjc3TcpkVbH2hQzNYMriU1JH_j_4WC3fao3dFLxyMv1WTkzuyRdceduWTcQCvoY_fPKLLd5t8W TunFykpaemezApcFkXZ49_7l5nveuDUZGv0ahZJ6gcpVAnsj5Zs005eDBvkDAQzEE0rjI1NroY1tWxk E_ClyZMUTLsXmBj1Vtsc WjawPE6v5tphCwUqIEcPHY0IhHj0XE27qV_psQa4N3ofHyQLwNv7l7f0dwgeptZ4bE26SIT_4re9A29i4 q9YneQ3kyWvx3 I9mOew6u10Ys8bHqcoG0VAKxts MaC9Hf8PcqaNvwv_XBoblMpZfwONfrYz_DNy106_estOY06tuFYKNXStslS2kfo86Qf7Us1VLByy DbmMqMKzb0zZS zolcJHuOU4azG2yLNfAF5mDBJ8UqNKbdVjoJ4ciqkYk FCYHIE1hvLmNpoN20z8US2EWEaNe _Xc32Y IVTyeE9DwNY1Bfy-G4YAAES3 X2ddlyj6xwREh4aaOrkgP3tp6LwnnAeW6AbCw_1wocgVpHbmHcDuugnw0Y0BLCeyY9G5f5z9XfW6zwKyz2ECLcDXZxXW9y6oCd4  (windows_media_player.exe)

1 / 68      (PUP)
http://www.towerchucklelaboratory.com/DjKRgKxdkPJk6 DwfGMYNCPADgRW3mpUdaAj na W8RLBPsgRfaU0eSPrn_3N4arCdGJL0jNUnKdV_xYzZoJ7Mfax7 GbqwKSfVuVw1 P5zXmTOz rPLoO14WYf4ZGkYN6jQMXPybiidNq6wDxEJ4SDD_AgvYboP2 57AMA3_AixZkB08WzB8smTSH2Sg tpw3VrlnzVUSQQB8WWxhERachu2xNjAg==-G4wAAES3 X2dRvzSdQ4JEQ8LNKEmB zdStoDPXlrnlMgO6TjLpqYvo5yG9O4kRKEG5pYpEWM9U8 s4YRP0mTufsH6nUeZU8ZwWWBO5guKGu_Vi_uhZE=  (total_video_converter_1.exe)

1 / 68      (PUP)
http://www.2016delivery31.com/c?x=UhTdPBvX0undkhzzWV3yZLOuFMpEYW0KSIrDDazvHZY=&c=Z6FwSpBA5U39GnV1DtYaj3XJq5lxGk9N9V4TOz7sWn/6V2nelQui3 KBvTJ3oTFRdsmg/U6VmRteNPlvGfqzdik61q zMZnNUxhfuhNixtntIQeX8KbHBgVTnhTBJNwvaox4G5Bb7 6X36Aa0KYqYUL1gzxGnpRnPJCXBc8n5Hk=&e=0&downloadAs=winrar_64_bit.exe&fallback_url=http://winrar_64_bit.es.downloadastro.com/.../?utm_source=ira&utm_medium=error_generating&utm_campaign=winrar_64_bit  (163fce9bc59b8d689b6c5e7acfbc23f2)

1 / 68      (PUP)
http://www.filesfunpackage.com/nJiaG9U8fveqbdPNb2TkjCCAAVP8E_oQPZeaa9fE0SQtVCvlDBIhVSjLMvmiYrsqOc_LM1u5mmIF3m tzpfv8F_wIf0n33UCdnw27DA5wd8G7t3GT_n95ccfG UYCZfEDua6hvaMJ1z2yqIgwL3_LxBjBj0hqYx ifoICOJ30Vxf4IwgueCOAfvuvsXTA7NJuonSvfPBnq0Lavt1k7wvtuRZGb2g6wfpuM0d AgrqikI4B7VgrEl6GQt3XZr9jBPU6L25DwtFn3vRjwXHH8LC Yp8LJCq6g hUU4_eawMOcp6wCN38Z6Pm9hCUk4bxrPUBF2w l265xAL7K P302T7U0AjAjvDMjcM5RuumG4zdJWfHM5OJQhn8IIAdgLxh24wvU2uu7Y6GqGiOZpeK7lDUwYT7IvolPS5wZc1jxudVJvDF3 zDGb0o8lKAw_n2myPjVVG4 r4k_9hm0P4vaLuIsCfN_y5LH3vIRxAjQhvHzCYefVVU4WFUX1kDZVCzxwpoFhAOvpd 1bt0mz70L7gxN4VIRUa66w4xI58A9UndzVCULhX8=-G7MAAER17vv4xNtjMV5Xs5AxFh2YATo5cPh aAvoEbdAcmkLdGOhHx ccGwGuY3frIJRIf5byIQZDqwm8PprXWeukRuO5_IxeKwg13N98lwah0qc916OOXYUIQtOJdwceDtxJcJs6 qLaE0w  (age_of_empires_ii_-_the_age_of_kings.exe)

1 / 68      (PUP)
http://www.contentappsclean.com/fQqbmu14eiPija1cBXL6p7dsDTjZXy FJya8ZC0UGNBMnM03aqD6ei_m8Uw1bMxSlGunCHx3J_aklq8H1eog5rZafpjyHFFf0KdhWsaZmdezXYTELaWxBOBPBWS5oQLcl2zt2K8LVEn0xu VSD 8t41dLKB daDiuYpeb3n9UqrRf7NcEoVJOQw8yXmwieh vzxKxPVm7DoverGAwvGjEVwLc2SuFfY17y4Lo3Zv0btychAVo1lb2d_m7lhgp2_rDKsF8QK_j 9zOCDyr6mKoRJwY1yiFv91KYZQA_L8zzQVrYqKeGRlUe8Ux349r7W9bOwzLpxL eMJhhKTXGsVwBV0pO0n5HYDh18u9BOqX6LzhHnnXCsPO1kw_oPrisfABaYAL4p52ad7ooozIEVU6nBF77Wg1c9gA jtaIYGsO1KGEpd0DeHM6o2VvAY_Vsb0OZzJRqVEG5dGscJtCz_UlqEmf6smN7TEnRhlv7Ls3MAE0t55p8=-G2gAAES3 X2ddlzSdYpFxA5LLCGnHDi0opJrfuED8N3GwPEFRbBeI27jcczokj SPO_jI9q3K75GbflM7skYkxFagDOCprFVpJ_FXrxMzPo=  (picasa.exe)

1 / 68      (PUP)
http://www.towerspresentbyte.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  (microsoft_excel.exe)

1 / 68      (PUP)
http://www.quickrepositorymega.com/wh6efUS6FI_R_KWa6aR kQ 8vxP34jfw6R1g sCsBwO8XxLChLAPE Wo3TZobrZ0NNMSv7j26pApFEBjNZGh1Iy YRtzj05Tsu1H4Y6M32pBmKi9BAW6AhO5WhMrlAsvJGUmdBGX5jm1ksk21NI 92rNOPRh6ut3eECMSb9BdlLc5S4QBajS1QYBLrgxuWIs5IW8xYT87gmARwijn13XdlSUPe5fAg==-G3oAAORte69pY0lrioiEhBqWTjlwaGUB5Ylczmc86MbCQ73gEI7NILfxjDzGdIWSW9CA1uuNfIwo95 rv9PLLlG04iEcFKQdoaakxmLXhTuQBA==  (nokia_pc_suite.exe)

1 / 68      (PUP)
http://www.signsbitsgrab.com/jUde XWBz2pU6k4yEbXZcAe d8oW0eopeH_rFuqVW8UmKs8vsL jOTy1hGm6L5ZzCRgSUmsQVIWirBeZDN1yXt04gFEvenvFBQabe7RbZOre4A2Gtt vWcVSIppBOzvDmpsPr11tLIKeOd1cW9hy7Zrpz sk4FGaYoCcM7_UUlPSTd 1Wy593CbWSYoXRFiObO0CJEoicjNRkjnI6kEK1pXgGAki9GkAqgMMxE47yc3g1bxJ23 J97dsTD88pQ2tBTTNtsv5CkSWgkTyEhTZVpRx_2JStRZYhldLGNxny8qGtwJiE7xIvq0h4X2_qLVQ3lgonbHph8xTrCDw0X_aH4 UQV5mTbTiBwC8hC4n8NWPG yxvsiFMGVKvKYDbg8P2S0tUaXnEYO8wY0Ew40ZffXR0ucrFWWsas_iAvLYtaA__qyj8G6xhQRqN_yrCXsATpUOJAUBgoGPVfx3 46l8qOTxJ Kc7kJ2Zlj6S 94SbeRkdCvD4=-G2YAAEQ315rRhzSeosiRY_AHVaccOLSCtoAib3e 29hwXAVFiF4jbuPRtGJvNjzP46OY2H_t6ZD6k8fgqQScEXQCUZH5rL rK8TwBw==  (ares.exe)

The certificates below are also signed by C.M.A.A.G Proactive And Investments Ltd.

7E260F4020B1070FDEF564FBB8360B6C  (Nov 11, 2015 to Nov 11, 2016)

1121CDD91A3A55F758D4D90BF9D5D6AD02EE  (Nov 11, 2015 to Nov 11, 2016)

* Note, the details and description above are based on the code signing digital signature issued to C.M.A.A.G Proactive And Investments Ltd by COMODO CA Limited on November 11, 2015 with the serial number '42bf94673750af4a912ba52f4f25c320'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.