» Bright circle investments Ltd.
Digital Signature
Analysis
Files (1,107)
Related (16)

Bright circle investments Ltd.

Publisher Information

Bright circle investments Ltd. is a software publisher located in Nicosia, CY*. The company is a primary distributor of unwanted software. Bright Circle (also known as Motoko Group, Evangelion Group, Robokid, etc,) that utilizes the free Crossrider extension platform to develope and distribute a number of adware software programs (SavePass, PlusHD, HQVideo, etc.) for the web browser that deliver advertisements. There is one additional code signing certificate issued to this publisher.

Authority:

COMODO CA Limited

Valid from:

6/20/2014 2:00:00 AM

Valid to:

6/21/2015 1:59:59 AM

Subject:

CN=Bright circle investments Ltd., O=Bright circle investments Ltd., STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Nicosia, PostalCode=2025, C=CY

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

4347d0f2ad67f1767c932b3bfbea7713

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Brightcircle (M), Adware.BrightCircle (M), Adware.Crossrider (M)

100.00%

1 / 68 (Adware)

uninstall.exe (25b41395bc6bd1c2bccdbb0769b2b414)

1 / 68 (Adware)

setup.exe (d97428e27e3f20012f4a2fad38029694)

1 / 68 (Adware)

hq-v1.8-nova.dll (273c022923d0bab7be75f3c5f88df086)

1 / 68 (Adware)

SuperSocket.ClientEngine.Core.dll (SuperSocket ClientEngine by SuperSocket) (c14844c60a63e3d5175ed95dc974ac99)

1 / 68 (Adware)

SuperSocket.ClientEngine.Protocol.dll (SuperSocket ClientEngine by SuperSocket) (95da3d7f657225cc63a27dc246afe819)

1 / 68 (Adware)

SuperSocket.ClientEngine.Common.dll (SuperSocket ClientEngine by SuperSocket) (6b0e9a6a1713c8a1ee1acb0cc0ead456)

1 / 68 (Adware)

WebSocket4Net.dll (WebSocket4Net) (a134f906ecf5447b0ca580c03e39e9eb)

1 / 68 (Adware)

Newtonsoft.Json.dll (Json.NET by Newtonsoft) (01744e352bf7ea0c92fd57bfb03d19d5)

1 / 68 (Adware)

Interop.IWshRuntimeLibrary.dll (Assembly imported from type library 'IWshRuntimeLibrary'.) (50b750bbf8cabb68974ba0b7b2215acb)

1 / 68 (Adware)

setup.exe (b3733a7bdd46f4dcce6efb862f6f2033)

1 / 68 (Adware)

fpryecoxk.exe (2aa5bd1805463972e17c95732922beda)

1 / 68 (Adware)

43f05b79-1fe9-4521-8eb4-1bbc0454bc9e-3.exe (Cinema-Plus-1.2 by Cinema Plus) (3bb9a4ef77976673c0344de4b8b9bfd6)

1 / 68 (Adware)

43f05b79-1fe9-4521-8eb4-1bbc0454bc9e-4.exe (Cinema-Plus-1.2 by Cinema Plus) (555ac188ab75d00b8273415b1a67786f)

1 / 68 (Adware)

izfhxztmrhuhjz.exe (f9076ea6053310cfadbc2cacfdd608e1)

1 / 68 (Adware)

cinema-plus-1.2-bho64.dll (Cinema-Plus-1.2 by Cinema Plus) (5fd35a8b02a5e0add430dffe5c525b3c)

1 / 68 (Adware)

cinema-plus-1.2-bho.dll (Cinema-Plus-1.2 by Cinema Plus) (b813569d849979a88d8ec40d067349b4)

1 / 68 (Adware)

cinema-plus-1.2-bg.exe (Cinema-Plus-1.2 by Cinema Plus) (02fa4b6d57216c5cadca2b8975ea252f)

1 / 68 (Adware)

96cdcc8d-2fbf-462a-b06f-3719883f54a8-5.exe (Cinema-Plus-1.2 by Cinema Plus) (80eecd05afb6084aba60d6c5c0cbca9f)

1 / 68 (Adware)

96cdcc8d-2fbf-462a-b06f-3719883f54a8-4.exe (Cinema-Plus-1.2 by Cinema Plus) (0e6e8e781062a7e22d399641f94846af)

1 / 68 (Adware)

96cdcc8d-2fbf-462a-b06f-3719883f54a8-10.exe (Cinema-Plus-1.2 by Cinema Plus) (1ba60c1dd78cd4c34a4e43ecb1e9a09b)

1 / 68 (Adware)

hjvzz.exe (fc7f77669739844fca02a2eca6522cd1)

1 / 68 (Adware)

uninstall.exe (fd76ccf7c084fd3cfcc71b87def2fc74)

1 / 68 (Adware)

WebSocket4Net.dll (WebSocket4Net) (2889bc564480d6f5b7e707a16af731b8)

1 / 68 (Adware)

SuperSocket.ClientEngine.Protocol.dll (SuperSocket ClientEngine by SuperSocket) (0c1af54a10e4312d456afba7dc9d86fe)

1 / 68 (Adware)

SuperSocket.ClientEngine.Core.dll (SuperSocket ClientEngine by SuperSocket) (4dac4f3fd1975b79d9053ce03c4aebb3)

1 / 68 (Adware)

SuperSocket.ClientEngine.Common.dll (SuperSocket ClientEngine by SuperSocket) (d119a84063c6ccfdc34a5f14f44bdbe3)

1 / 68 (Adware)

Newtonsoft.Json.dll (Json.NET by Newtonsoft) (35302ec4242092a15662975ac41d4aa7)

1 / 68 (Adware)

Interop.IWshRuntimeLibrary.dll (Assembly imported from type library 'IWshRuntimeLibrary'.) (1cc400d931ed43049208279649cf7fd7)

1 / 68 (Adware)

cinema-plus-1.2-nova.dll (a236ae7466b15db5d4b7c05a3e211ada)

1 / 68 (Adware)

WebSocket4Net.dll (WebSocket4Net) (f2b2560d076a793a1b6eb00f159bae6d)

Latest 30 of 1,107 files

The following certificate is also signed by Bright circle investments Ltd..

00EF90FEF9AC8E258E5D30D0E08C84D37E (Jun 19, 2014 to Jun 20, 2015)

The following publishers (by Authenticode signature organization name) are related.

Kimahri Software inc.

Stampede Technologies

Hike Zone Plus

* Note, the details and description above are based on the code signing digital signature issued to Bright circle investments Ltd. by COMODO CA Limited on June 20, 2014 with the serial number '4347d0f2ad67f1767c932b3bfbea7713'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.