home

SuperSetup (New Media Holdings Ltd.)

Publisher Information

SuperSetup (New Media Holdings Ltd.) is a software publisher located in Tel Aviv, Israel*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.
Authority:
GlobalSign nv-sa

Valid from:
3/15/2016 5:02:13 PM

Valid to:
4/23/2017 4:32:15 PM

Subject:
CN=SuperSetup (New Media Holdings Ltd.), O=SuperSetup (New Media Holdings Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112175abd22ca9db2f1a665a1dfe36d01daf

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.NewMedia.NMH (M)
100.00%

1 / 68      (Adware)
icreinstall_paint the town red.exe (Rasafuk by Hehohahan)  (10bf306d7a71f5415dfa5adc3767d794)

1 / 68      (Adware)
subnautica.exe (Doh)  (597bbd9489e53a2136c6d9b3fb9d0b56)

1 / 68      (Adware)
terratech.exe (Henopekaf)  (8fcce769dc9d08a7af1b5adad433e77c)

1 / 68      (Adware)
turmoil.exe (Rasafuk by Hehohahan)  (673ee2864190385766a044e5d64a11cb)

1 / 68      (Adware)
turmoil.exe (Rasafuk by Hehohahan)  (eb126e28e2f61f3085c21ca65d17351d)

1 / 68      (Adware)
turmoil.exe (Rasafuk by Hehohahan)  (4bcf3495a88e9a64409b847599027db9)

1 / 68      (Adware)
turmoil.exe (Rasafuk by Hehohahan)  (3404e99b6fc9830396e0e90c1a7207b5)

1 / 68      (Adware)
icreinstall_pixel gun 3d.exe (Hig)  (8fc5486fa3fe9777bc80d60d36b7f16f)

1 / 68      (Adware)
slime rancher.exe (Hig)  (ab3e36da737f4705e55ac93d9b536788)

1 / 68      (Adware)
minecraft.exe (Guref by Bec)  (8ea9cb1cfc45dfa2bd3a8d4dc1ce62d3)

1 / 68      (Adware)
hungry shark evolution.exe (Henopekaf)  (9080ea3f100aa2fc72c1f708d90c00b0)

1 / 68      (Adware)
ultimate chicken horse.exe (Doh)  (4f5bd5e00814ae0f60140adc3f9511d6)

1 / 68      (Adware)
ultimate chicken horse.exe (Doh)  (82e9fdd7fec23d7fe18e9d652fb15b99)

1 / 68      (Adware)
the culling.exe (Git)  (4ab74d1711c90606a9f47b5262c4a5e7)

1 / 68      (Adware)
scrap mechanic.exe (Befofit by Gibe)  (716912de1808cfcba8c7f20a3c796962)

1 / 68      (Adware)
ben and ed.exe (Kedug)  (2982c67c8ce0c2ac59f424e00b5b7058)

1 / 68      (Adware)
minecraft.exe (Doh)  (4b3c05afd36a5426c41af516250313f8)

1 / 68      (Adware)
pixelmonlauncher-1.1.57.exe (Rasafuk by Hehohahan)  (2b0a3e54fb89ec796740118e93fe1c3b)

1 / 68      (Adware)
pixel gun 3d.exe (Rasafuk by Hehohahan)  (fa47b09d289298fec6dc5cd2402c992f)

1 / 68      (Adware)
trove.exe (Kedug)  (ebb913aa37d1b6e985badae5b421dade)

1 / 68      (Adware)
scrap mechanic.exe (Befofit by Gibe)  (2557dfc9a8875b360589f30763a64e17)

1 / 68      (Adware)
growtopia.exe (Henopekaf)  (d53c61a0dcd356efe83c0dd28e489d21)

1 / 68      (Adware)
walking war robots.exe (Cusekodona by Holemite)  (74b2ba561b9a5dd67a5f0181397d4792)

1 / 68      (Adware)
icreinstall_the culling.exe (Rasafuk by Hehohahan)  (a5fd73938783ade145df8104d837c0f5)

1 / 68      (Adware)
minecraft.exe (Hig)  (a3ace745857a47eb3b5591e07f41a8cc)

1 / 68      (Adware)
minecraft.exe (Hig)  (d5372be02ebb49021c016e4dc2e3f278)

1 / 68      (Adware)
icreinstall_the forest.exe (Cusekodona by Holemite)  (70b641fbf3f91f779809c8bc269ef769)

1 / 68      (Adware)
60 seconds.exe (Bana)  (05b1e934e6d629a4ea9a7d78033fe9e4)

1 / 68      (Adware)
visualboyadvance-1.8.0-511.exe (Rasafuk by Hehohahan)  (67d779f093f521eeac759ee32e90f5f9)

1 / 68      (Adware)
dead by daylight.exe (Doh)  (c0cd96f266e91f0771c99b4146bc8161)

 
Latest 30 of 46,057 files

Downloads URLs for files signed by SuperSetup (New Media Holdings Ltd.).

1 / 68      (Adware)
http://www.vaultsapplicationbody.com/0crX7khFQ2v5kOFH47C zeF03764Itn6sX3A x3WxyZlH5rZkyWUfHK1T1byId49Yv7PHtA5o0yM 8gl4Gft2G0ju H0I3ClJ nXcM8rH2jAzLqgEYdlmJhiV7b0tgIR3PKqyBk8rSYmg4EqoI9i3Ea8HrCwSI7RJMuVb5uNVSmjraWzzIlIpzm3IKxUC0zUs6o rlcC9_6NFgKDUPKNZJ3pVHPKUr18xmjp wkFgisWGIEgwgWIOfcM7k5vR9e5mAdQ3COtQj8DemKRrk2TlV2pqOoUt4j9bJn38V3nlyq1cvrD8oet5iu8Y9Gy2kF1upn7RA93DmtFbVqJNBnDxiQqMVmRNUwBp7FkwteL1RJiIsT89Z1HEDRz82uEGasG86E51DwUk338fqbmNDBFYgITaCEkRBhuTO6aUbQpGjwz71Aub4rq43cOB9qsYfp8WSkwrzynmKGOfX1gcLuW0ZDQtF1Pj3IHMhwK SUjR26MbmtZJc10Xn8W8e60Gn3yomHlGVXeaNoqmC EakbpEAWyaviI0C2YWjyejwjsaGATD1z_dyI=-iwWARmFsbGJhY2sgVVJMAw==  (hungry shark evolution.exe)

1 / 68      (Adware)
http://www.citytowerscurrent.com/7E4hsyEwYApyPMNkC5oFfesL3Kf1gF8oriHgnUfRnDZO6SHuAFqFhnA1my1A89zG6d3i7GbiZP2Py HCoiMUtLQwFMZioJHcSpboHq1sokaGvslzCym0B1S fOfW9d03PKH_TeGRbGLKiTsepUYFObtm7K22uKh8gne88o32o5I8c1lnr8uuKY398AVOfI3pl7NqU2TpOt5D3WwVOKJhyJ_VN8YTJA==-Ow==  (ben and ed.exe)

1 / 68      (Adware)
http://www.citytowerscurrent.com/CSONW1E22Cyk9Qb LyKTHy4lTawH6lxxMHqbrMR_u WyCdvhV 8QkmYa947ZZkh5mBw1xTxFNml39pFOendMAvFgR_24vkEETnQaSNOnJEKlu7hIDZlks7Neh9Tz3WB3v9IXAohRsfsJ5f0igOVLASeQj0WdQXHXdzasj PNNaHj03B_imCNlM_4BJkQKmEbT ud3LEq1 EEplbn9O42pYDqaqFu2A==-Ow==  (trove.exe)

1 / 68      (Adware)
http://www.vaultsapplicationbody.com/c?x=kW2gUBEC3A2NbSu6kUZ92iNlmC69YkqEOmId8bD4/78=&c=o3ADqh0 ZOp3 xjGwWuffBPmIQvHTxftVmcNG6qpp0ff2t0SgWqVz79qGh5CbH/YtpdpwQT/.../W2ge7Krdw6cgvZ62MT5&downloadAs=Scrap Mechanic.exe&fallback_url=Fallback URL  (2841733e675d009256b67c2baa25453d)

The following certificate is also signed by SuperSetup (New Media Holdings Ltd.).

11213F2CC18E1D1A2272A2F1AEE32C7A377E  (Dec 17, 2015 to Mar 23, 2016)

* Note, the details and description above are based on the code signing digital signature issued to SuperSetup (New Media Holdings Ltd.) by GlobalSign nv-sa on March 15, 2016 with the serial number '112175abd22ca9db2f1a665a1dfe36d01daf'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.