» Big Bulb Ideas IT Pvt Ltd
Digital Signature
Analysis
Files (41)
Downloads (4)
Distribution (2)
Related (8)

Big Bulb Ideas IT Pvt Ltd

Publisher Information

Big Bulb Ideas IT Pvt Ltd is a software developer located in Secunderabad, Andhra Pradesh in India*. The company is a primary distributor of unwanted software. Thre are 2 additional code signing certificates issued to this publisher.

Authority:

COMODO CA Limited

Valid from:

11/28/2013 1:00:00 AM

Valid to:

11/29/2014 12:59:59 AM

Subject:

CN=Big Bulb Ideas IT Pvt Ltd, O=Big Bulb Ideas IT Pvt Ltd, STREET="C5/1, Road#2, Vikrampuri Colony", L=Secunderabad, S=Andhra Pradesh, PostalCode=500006, C=IN

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00ec052e7d4f74a667e7c16553ee590dbe

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.BigBulbIdeasITPvt.Y, PUP.BigBulbIdeasITPvt.G, PUP.BigBulbIdeasITPvt.P, PUP.BigBulbIdeasITPvt.O, PUP.BigBulbIdeasITPvt.N, PUP.BigBulbIdeasITPvt.W, PUP.BigBulbIdeasITPvt.X, PUP.InstallMonetizer.BigBulbIdeasITPvt (M), PUP.InstallMonetizer.BigBulbI (M), PUP.InstallMonetizer (M)

100.00%

Rising Antivirus

NS:PUF.SilenceInstaller!1.9DDF

53.66%

McAfee

Artemis!4D9CEB0AF44B, Artemis!7E975B631549, Artemis!C3FC0F94EB1D, Artemis!424F4919658D, Artemis!923CBC05B180, Artemis!9DB63F58D377, Trojan.Artemis!841022AAD40A, Artemis!7221CBAC394D

46.34%

Trend Micro House Call

TROJ_GEN.F47V1208, Suspici.C8260954, Suspicious_GEN.F47V0115, Suspici.6DC2B25E, Suspicious_GEN.F47V0113, Suspici.31E8D10B, Suspicious_GEN.F47V1119

46.34%

Dr.Web

Threat.Undefined, Adware.Downware.8749

46.34%

Avira AntiVirus

APPL/Downloader.Gen

46.34%

K7 AntiVirus

Unwanted-Program , Trojan

43.90%

VIPRE Antivirus

Threat.4786532, InstallMonetizer

41.46%

ESET NOD32

Win32/InstallMonetizer.AG, Win32/InstallMonetizer.BB, Win32/InstallMonetizer.BB potentially unwanted, Win32/InstallMonetizer.BC

39.02%

Baidu Antivirus

PUA.Win32.InstallMonetizer, Adware.Win32.InstallMonetizer

39.02%

1 / 68 (Adware)

freeocr___1_10209_gc.exe (a8d3bfd931c50b790542664419233adb)

1 / 68 (Adware)

never_blue04_8668_263888.exe (ad707b6e543ab8b7985775327828c6b3)

1 / 68 (Adware)

freeocr___1_10209_ff.exe (a83fab5cf3b09a9f1f9fc67133b836e3)

1 / 68 (Adware)

freeocr___1_10209_ff.exe (4b4c1a7d624f6dca7d73bed1a0a2ea5f)

1 / 68 (Adware)

never_blue04_8668_319894.exe (b5912352b85c11b941773ccda7747bdc)

1 / 68 (Adware)

freeocr___1_10209_gc.exe (8e168c6dcb8b860a59ed051226829d7a)

1 / 68 (Adware)

freeocr5.exe (52e432f56802896ca4cc2b375bfc17c3)

1 / 68 (Adware)

winpccleanup_installer.exe (aab38a637e97fe9907ebde25c16775ae)

1 / 68 (Adware)

freeocr___1_10209.exe (a694cf4ce9cc3cfc4acc08360d71c106)

1 / 68 (Adware)

shopping_saver_star_ld_01_8872.exe (ae2f9fd71bb57ca3fb8b6674d38d3324)

1 / 68 (Adware)

freeocr___1_10209.exe (749062460fd3c4bc0c9514a1e53db94c)

1 / 68 (Adware)

freeocr___1_10209_ff.exe (db422b1bcafccc231a82a73a3207196d)

1 / 68 (Adware)

freeocr___1_10209_ff.exe (2cbd669dabae9d00f3643f2e14a75154)

1 / 68 (Adware)

freeocr___1_10209.exe (3b79ab21f0f7c5ca58bb13f1bd5e22de)

12 / 68 (Adware)

freeocr___1_10209_gc.exe (b391903081d7fdbbac2a3c265b8302d9)

1 / 68 (Adware)

freeocr___1_10209_gc.exe (6d513b311cee80feec38356291f26b9e)

13 / 68 (Adware)

freeocr___1_10209_ff.exe (fea731723786f96488acfdbee4974c0b)

1 / 68 (Adware)

freeocr5.exe (d8fcdd983735dc6ff0949342071e046c)

10 / 68 (Adware)

freeocr___1_10209_ff.exe (68a9a514eeaca40223a4d14751f46d16)

10 / 68 (Adware)

freeocr___1_10209_ff.exe (3a52c360e4b5c9cb8cc29d1507c7120a)

14 / 68 (Adware)

freeocr___1_10209_gc.exe (7221cbac394df24c6972911f541af60e)

14 / 68 (Adware)

freeocr___1_10209_ff.exe (259b7fa6df1cd913a4df2b0fd5256e19)

30 / 68 (Adware)

freeocr___1_10209_ff.exe (cae28f09c866c8ce95cd4f892e8fb3dd)

14 / 68 (Adware)

freeocr___1_10209_gc.exe (87256fb077716c3429a690affdd6d28e)

12 / 68 (Adware)

f_004e0a (a651b736618996300c9b22fdd2263a05)

13 / 68 (Adware)

f_0000ec (bcdbbe3cb71b231425354f7e431b0827)

13 / 68 (Adware)

freeocr___1_10209_ff.exe (990e0061dbbb85c2a896934ff64e96cf)

14 / 68 (Adware)

freeocr___1_10209_gc.exe (6eb1013ef97f54f11ba03dbc1bf797a6)

13 / 68 (Adware)

freeocr___1_10209_gc.exe (a42b7cdbca9e1be00520fd4518872fcc)

13 / 68 (Adware)

freeocr___1_10209_gc.exe (cf9fde4304c699e0cd7500e3ca15e529)

Latest 30 of 41 files

Downloads URLs for files signed by Big Bulb Ideas IT Pvt Ltd.

6 / 68 (Adware)

http://secure.rocketdlgo.com/nsi/.../Never_Blue04_8668_319894.exe (4d9ceb0af44b13f089498c02c5ba7299)

6 / 68 (Adware)

http://www.cooct13hen.com/download_codesign_v1.php?id=l3 DeA==&subid=319894 (never_blue04_8668_319894.exe)

4 / 68 (Adware)

http://secure.rocketdlgo.com/nsi/.../Never_Blue04_8668_321145.exe (5e4f41cd742d9478579b1719b86db768)

4 / 68 (Adware)

http://www.cooct13hen.com/download_codesign_v1.php?id=l3 DeA==&subid=321145 (never_blue04_8668_321145.exe)

Distribution

The following websites host and distribute files published by Big Bulb Ideas IT Pvt Ltd.

secure.rocketdlgo.com

www.cooct13hen.com

The certificates below are also signed by Big Bulb Ideas IT Pvt Ltd.

2B50C79C5EA186 (Oct 29, 2013 to Oct 29, 2014)

4F23C3D665B751 (Oct 31, 2012 to Oct 23, 2013)

The following publishers (by Authenticode signature organization name) are related.

Start Install

Weather Warnings LLC

Duuqu Group OU

Browser Distribution Services, Inc.

* Note, the details and description above are based on the code signing digital signature issued to Big Bulb Ideas IT Pvt Ltd by COMODO CA Limited on November 28, 2013 with the serial number '00ec052e7d4f74a667e7c16553ee590dbe'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.