» FlashSetup (New Media Holdings Ltd)
Digital Signature
Analysis
Files (3,451)
Downloads (9)

FlashSetup (New Media Holdings Ltd)

Publisher Information

FlashSetup (New Media Holdings Ltd) is a software developer located in Tel Aviv, Israel*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.

Authority:

GlobalSign nv-sa

Valid from:

12/17/2015 2:31:27 PM

Valid to:

5/26/2016 5:06:50 PM

Subject:

CN=FlashSetup (New Media Holdings Ltd), O=FlashSetup (New Media Holdings Ltd), L=Tel Aviv, C=IL

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121fded645f5771d0b9771141024e9b6bfb

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.NewMedia.NMH (M)

100.00%

1 / 68 (Adware)

apache_openoffice_4.0.1_win_x86_install_en-us.exe (Hamonog by Piruriponi) (68a01d09abb34987cbca7373d2a1408b)

1 / 68 (Adware)

setup.exe (Pamecokune) (d685355141f673f46861ad9f1ed01d3a)

1 / 68 (Adware)

ci4fzml.exe (Sog) (e5c2d4a0455cc559e0f821903fbea2c7)

1 / 68 (Adware)

sscnc6.8.4.7demosetup.exe (Pamecokune) (fa72621b5ac9d386afc0c83b47d1dc7d)

1 / 68 (Adware)

auto-tune-7-vst-pc-v7.1.2.exe (Sog) (b297cda0265d8c36785a98f2a5203c7f)

1 / 68 (Adware)

setup.exe (Sog) (7675ff7d86af288d9c66725e3a5b3eca)

1 / 68 (Adware)

bloons td 5 deluxe.exe (Hamonog by Piruriponi) (c8b949755fbbac33d6f9388ba4778784)

1 / 68 (Adware)

icreinstall_o2jam_v3.50standard_20051208.exe (Sog) (18836e2d6cb2644a576baaad9418f6ed)

1 / 68 (Adware)

supercopier-windows-x86-4.0.1.13-setup.exe (Hamonog by Piruriponi) (fcac82431bcf98c01a2cc23e34a40118)

1 / 68 (Adware)

roblox.exe (Hamonog by Piruriponi) (2dcc1848d873e9aced5f2093ae73568d)

1 / 68 (Adware)

barbiedressup1.exe (Hamonog by Piruriponi) (dd173264486ed8f50e6e90f56e059e56)

1 / 68 (Adware)

firefox setup 40-win10.exe (Hamonog by Piruriponi) (6ec848e35f64fee2c6d173f4e06e766d)

1 / 68 (Adware)

setuptv.exe (Beduhogano) (13eff85745d825395a95953224092142)

1 / 68 (Adware)

vcdcuttersetup.exe (Beduhogano) (24918456b14aa3c383d19674afbb4126)

1 / 68 (Adware)

pokemonemeraldversion.exe (Hamonog by Piruriponi) (7820a346c7068eef4e30ac5186564d5b)

1 / 68 (Adware)

onair-player-setup.exe (Sog) (aa4139fed45130de4481c0763de6bc4f)

1 / 68 (Adware)

idman622.exe (Sog) (ba34e1cdf28c79ed6ac7b94d09df40f9)

1 / 68 (Adware)

downloadapp_1_6_5_165_setup.exe (Sog) (cfc60ca400fdffda765d83f1aeeaf5b7)

1 / 68 (Adware)

splayersetupint.exe (Hamonog by Piruriponi) (ad8cf10164e463138772d456266e8052)

1 / 68 (Adware)

firefox setup 40-win10.exe (Beduhogano) (89b61174e685fb43e66efb2436fc4ce9)

1 / 68 (Adware)

sogou-pinyin-62d.exe (Beduhogano) (c86567f1be793e32913db9eb00f83185)

1 / 68 (Adware)

tastybluedemosetup.exe (Hamonog by Piruriponi) (83e1630c1a73107fe3e8e5a6a0e64fb4)

1 / 68 (Adware)

firefox%20setup%2040-win10.exe (Sog) (50ce4082f80ec051927e58a4571afce3)

1 / 68 (Adware)

gyganinstall-0775.exe (Sog) (1f11d3b5b8f6e5b2f94c229332154260)

1 / 68 (Adware)

supermarioworld.exe (Hamonog by Piruriponi) (de2bdb3397432fb768397db8d8cb31a9)

1 / 68 (Adware)

dropboxinstaller-win10.exe (Beduhogano) (fdcecae16db0ee28f8e0ba32a9aa0d7f)

1 / 68 (Adware)

icreinstall_firefox_setup.exe (Beduhogano) (ac4aca7c962a3e449fbfd7b7a7d33ac4)

1 / 68 (Adware)

icreinstall_jad8101_basic.exe (Hamonog by Piruriponi) (638565fce27099b5943c94f1a2c5eaea)

1 / 68 (Adware)

icreinstall_pokemongenerations02enwin.exe (Pamecokune) (12f0ebe83c99f19013428de20e5ef96e)

1 / 68 (Adware)

mendeley-desktop-1.11-win32.exe (Pamecokune) (8d1f7a24ba2ac8509fd1d4bd19ed24f4)

Latest 30 of 3,451 files

Downloads URLs for files signed by FlashSetup (New Media Holdings Ltd).

1 / 68 (Adware)

http://www.megadlcenter.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 (sscnc6.8.4.7demosetup.exe)

1 / 68 (Adware)

http://www.presentcapitalquick.com/c?x=70/CepzV5Smqzk33bE1/Hfr8S mj60yrwXeM5A8ej4o=&c=kfsny4wLIraGcvjNV1a0HEWZuFPglT0MP9KKc3jlrVD/aBv2c98bETe3Q/zTFtPPA5hGMALWW0NIgAfEHlu7T3CbEZQwsneNrWrDEDjf4c4yK5LusflpDmXQpnBhJx4 tS tX9Bck41 OW1zKEXpf4moR7m0iWmvnVdpd5/6UkQ=&e=0&downloadAs=Roblox.exe&fallback_url=http://qpdownload.com/data/roblox/.../Roblox.exe (2dcc1848d873e9aced5f2093ae73568d)

1 / 68 (Adware)

http://www.presentcapitalquick.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 (splayersetupint.exe)

1 / 68 (Adware)

http://www.bitssignsconcepts.com/c?x=lJRDdAmG39cveRma wvWTS3PrYADFkZPytBeam8NiII=&c=s3kDeIQngwqt3mOYtDaofew bZQtEKkCWg8Q1uOROvBicHx7ddRCLKMNIwQV4436phJA86H8uzkGdvO2mob8Zi13mqACgIkp1JtIFi56rCfyGSfJya1fMMwNGJwUxRit&downloadAs=Mendeley-Desktop-1.11-win32.exe&fallback_url=http://qpdownload.com/data/mendeley/.../Mendeley-Desktop-1.11-win32.exe (8d1f7a24ba2ac8509fd1d4bd19ed24f4)

1 / 68 (Adware)

http://www.presentcapitalquick.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 (eagleget_setup.exe)

1 / 68 (Adware)

http://www.presentcapitalquick.com/c?x=R0RPXkBPg42euTfYfh/00a5DcnoDxfJOnkrAThERN2g=&c=5iDPByzst5xHVfWKn3ZLK1IR3cBIffucUk5QEwq5sQepueJUEVTSwJY5G1JevTqledqjdMwyiWFZ7WC24XuWBUVrfucLoJA1BqOrSrQtTmGWN XgIDXhI4uUz4SMtIwI&downloadAs=Spark_MiniDownloader.exe&fallback_url=http://qpdownload.com/data/baidu-browser/.../Spark_MiniDownloader.exe (771775de479dedcb2f06ef7bdfc73059)

1 / 68 (Adware)

http://www.megadlcenter.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 (cdex1.77win32.exe)

1 / 68 (Adware)

http://www.megadlcenter.com/c?x=FScYXFUilrR6BAEAg Eg36r6lW moCCkKxEGaENVBSk=&c=/v0HC /Iay3PFMnpwy9G3byfYZpHe1LSNbm52AkpDwl/4cZAsbD99OB8/X0VF28zODdLRKpX68kB7RSt/rTbmjXcz1UF9Xw9i6MA5NWAmooQe3XQiXqeiAHqQvhjfWkwX78Fcr 0GJYejrRisUixMJ8yePkfBBtwnkL1W4jybe8=&e=0&downloadAs=setupclonecd.exe&fallback_url=http://qpdownload.com/data/clonecd/.../setupclonecd.exe (3b429f87dc22ba1aee3a2f143e08fac1)

1 / 68 (Adware)

http://www.megadlcenter.com/c?x=rOnJfWwlbSjJHXbV ITmP6xynrK3eyQyUR4B1oeb8Wg=&c=cDyVG/teP6 G8SBWk/iQpBEkGtE2IE2BavX4G2MNWgZLLcnb5qgmFm0J6ZGTusOpEbBe/PlwlzKu1QramCupEFuP6t4x3GJq1bxJ1oIAxU0Tdb9MemJIb2UziaO4uJt8S156 fMvNQYt2YMJmY0 0s kqBG5JpjwQdjIf zTaqE=&e=0&downloadAs=PointBlank_031013.exe&fallback_url=http://qpdownload.com/data/point-blank/.../PointBlank_031013.zip (5044ca6aad326bd1a9749e543527b725)

The following certificate is also signed by FlashSetup (New Media Holdings Ltd).

1121A1240B8192181F595DADC70D707D9031 (Mar 15, 2016 to Jun 26, 2017)

* Note, the details and description above are based on the code signing digital signature issued to FlashSetup (New Media Holdings Ltd) by GlobalSign nv-sa on December 17, 2015 with the serial number '1121fded645f5771d0b9771141024e9b6bfb'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.