home

BULLY UNITY LTD

Publisher Information

BULLY UNITY LTD is a software developer located in Jerusalem, Israel*. The company is a primary distributor of unwanted software. Thre are 4 additional code signing certificates issued to this publisher.
Authority:
GlobalSign nv-sa

Valid from:
8/9/2016 12:55:02 PM

Valid to:
8/10/2017 12:55:02 PM

Subject:
CN=BULLY UNITY LTD, O=BULLY UNITY LTD, L=Jerusalem, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G3, O=GlobalSign nv-sa, C=BE

Serial number:
60fcae84e0126fc8f49ec1ad

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore (M)
100.00%

1 / 68      (Adware)
proshow_gold.exe (Magemabi)  (6ba7cbbe34e3ad161c8d5f9fd6edbcf0)

1 / 68      (Adware)
icreinstall_windows_media_player.exe (Gicatuh)  (34deb015e79cc1504a14c3d917ce3b78)

1 / 68      (Adware)
telegram_for_desktop.exe (Pigapoc)  (abf546044592e2b495ffeea10da5a90b)

1 / 68      (Adware)
roblox.exe (Fakadal by Nofedu)  (65380f4a8c56808646ffca84a448162c)

1 / 68      (Adware)
kmplayer.exe (Fakadal by Nofedu)  (ea1edf494896341c55a2a1d3fdf708d8)

1 / 68      (Adware)
icreinstall_microsoft_word.exe (Fakadal by Nofedu)  (ec939623c57fee984a15ccdaffebd346)

1 / 68      (Adware)
itools_for_windows.exe (Mepo by Cinafo)  (b61bb559cfca1bb538fa4b0843d90721)

1 / 68      (Adware)
limewire_music.exe (Ginopubob)  (460906ba10033426d737c10022dfc177)

1 / 68      (Adware)
bearshare.exe (Ginopubob)  (42d7c7e7e7863d50fa0dc65966ae0265)

1 / 68      (Adware)
utorrent.exe (Fakadal by Nofedu)  (74e92b940310e4080df44c1efdea91bd)

1 / 68      (Adware)
grand_theft_auto_v.exe (Fakadal by Nofedu)  (914174b34acde9982ed49ecf516279c6)

1 / 68      (Adware)
{blocked}.exe (Mepo by Cinafo)  (7541c8f4333bfe8e0f205c85fc81ff4a)

1 / 68      (Adware)
grand_theft_auto_iv.exe (Mepo by Cinafo)  (227976f64fda05cde0da85b35e8004f2)

1 / 68      (Adware)
grand_theft_auto_-_ultimate_vice_city.exe (Mepo by Cinafo)  (b0ea9353f01b4de3fdf861f1138b3f56)

1 / 68      (Adware)
icreinstall_sweet_home_3d.exe (Fakadal by Nofedu)  (de846911c7751d246496d89969dc0342)

1 / 68      (Adware)
cain_abel.exe (Makakuk by Riha)  (c4c897d5e5b2ee12d1bcbaa52c6b8284)

1 / 68      (Adware)
steam.exe (Gicatuh)  (71a0e8277b60c06f9eee5e32b16326db)

1 / 68      (Adware)
microsoft_outlook.exe (Makakuk by Riha)  (ee117af8b6a5a9b48d63a330e4ec11df)

1 / 68      (Adware)
advanced_disk_cleaner.exe (Mepo by Cinafo)  (0f64a10d806a2031b5a446f5c9b6b8ce)

1 / 68      (Adware)
viber.exe (Makakuk by Riha)  (642755fa5945740cd4341df516d593d5)

1 / 68      (Adware)
icreinstall_ilivid_download_manager.exe (Fakadal by Nofedu)  (60704c9a676933488cedfa3a0c88eed2)

1 / 68      (Adware)
icreinstall_sqlite.exe (Mepo by Cinafo)  (c4d2f1b1e5906c5747a105b0a5d58190)

1 / 68      (Adware)
microsoft_publisher.exe (Pigapoc)  (59edf07db81944f84c2468f1b2a62347)

1 / 68      (Adware)
microsoft_publisher.exe (Pigapoc)  (4b7acac83a177d0698ec820d44137169)

1 / 68      (Adware)
happy_wheels.exe (Fakadal by Nofedu)  (bf46f76aeb53cf799936fc488c205bb0)

1 / 68      (Adware)
itunes.exe (Fakadal by Nofedu)  (d0ca5cbd5f73cd7e6a9882cbdaf80ad2)

1 / 68      (Adware)
windows_live_messenger.exe (Fakadal by Nofedu)  (74f54d7800bdca18773ec9fe48054229)

1 / 68      (Adware)
winzip.exe (Fakadal by Nofedu)  (44280817d0839231cc5eaf76c9bfcae7)

1 / 68      (Adware)
picasa.exe (Mepo by Cinafo)  (ddae969e5d26df9b946d1c92825bbef7)

1 / 68      (Adware)
não confirmado 475787.crdownload (Fakadal by Nofedu)  (46b21df82279dda0176a0b9727e15e5f)

 
Latest 30 of 11,156 files

Downloads URLs for files signed by BULLY UNITY LTD.

1 / 68      (Adware)
http://www.contentgiftcycle.com/jMtGlrx5rUJexTgAbKSXbL91Qa1_r1R1LXg5 Ub8RuClpVls_0VLVKGFqrdZ5lMc2PqW4oeuVE 2laBY2 AjKayN4aTUYjToV2Z44tSwk8UlhKPw5_NT1OG0 KQrSrOdkwHgV0v6tVgU_yFAWnwZI2H42kCLAJLZPAC2H B2OyVfgM63aaBhfvpAvK1nuhFYrdPWQEbY-G3QAAORte69pY0lrikWEwxRTSCcHDt8P3wLpnnCaa6Abg4d8wXEQm0Fu4_Yw15RwwBMaryfyEfA7WT5HH5VKzyrWRgluwjFBShFYNKWRe pCHaQA  (proshow_gold.exe)

1 / 68      (Adware)
http://www.presentbestclean.com/ZDSwtUbBYvNv3LdZGeuLqkOYQPE0juXvc3bCseHHM40YjgXUIG5YQv9BTdoavjyD2yEAkUcq0Md2s_z8QCRu_V_Aywy3Nfj_N0e84_w9GDu9y_KTHJcRybl0jlq4TiHNiuEEKxkv7Ua9zRyZUyp3j26Z S9zt1ZBWubqMw_0VKoNp2y2xIbeb5_VlfHM4EO9U95kjz6vblgLT8supFMPKd_bK9GLNUR1RpAd68Tx4mY_GurVSveV5fbX4ItsNH0YK RfF7H2rHiZ atTGC8MCdvK2eIuVl_8tO40hFHlHcGjbgLM2VV3dGXI9M2J1YO2lqTQTDTki txKXdhdT VEjd7 6FK7XdjOZDxQF6Q9nMoUmP3nQf 0NEeU4nzvsSzKIid5fdrRN5r7nkniuCTZd55cTYhbbf7I7uciWoq8OD4GfGrX7FFGE9DKMKs4qGYUN5QCt99rgZVPbO64TRSw5c1D56rctlplYz1Gth4BuuTej79aFo=-G24AAES3 X2ddlyj65QICYkZWDrlwKGVFd3yC9_5oBsLD_XChyA2g9zGcxiwYiGh54F8NCf376M 9d3KZfCcTTglaBE464zWY9cFChg=  (kmplayer.exe)

1 / 68      (Adware)
http://www.filescurrentlaboratory.com/B0R5_srFaz1hxvTbZP0qKO94MlwEBQCnfyWdbaady71MNSTx1mDWW3YKMxS2mkMC DaimYXM7KO08X2pduuyPq4_806RtQRQfeTdpeBz6fTyWjYduJB45ttN HWssZodTTJJv5XUYQE01lD7lStyyZZGG6rQqKaYpqfteOOxvHmtmeJ_oZYdpUs02OmJYO4KbUF9n2CKb6FMCdKcXtjFO8RXQf1FoD9T0ivk_7ipeGLOTlWjHPaZvYnVzDp9GbKiIOsazYxv9VGeGIKgi SasRI4tN_9xnfIWTIeIAoeRZRnD0euGn5V_qa6cDPtW9NcSI7ODp_E6v63l0N0bhtA4IMeiZmonWAzpk dwrJyXkHYlxKXXYOppdQWPKsK73pKQWdNgvpmcrSjbZ7wHZUjvoqNcj_9WufZLqguxTBGb3etsIXVyd9sJUN2mTRQbeenxT6tPT2hAI1UeiPyTJpy_iwfuf3siCk3jLDWjIpKVBUK6Afsa2YFuKJLYbZYq56ni7mlpOab-G4AAAEQ319qjD0meosgRMXhBP8jFAfv ygKaBQnHOQZyw3L8yqjlc4htjFmyqKXwGxuyoerrk3ymlAs_bdd98FOm0Nc4WldwU2Akc0tkdTzPJ_FmGA==  (microsoft_outlook.exe)

1 / 68      (Adware)
http://www.giftnewgift.com/wQ7Dy2KtW8Bp2ihp_jXBzKBl9U14h9GrNlEhnhNYhdPzbtsYakscMdRCySUWlJ2rpYMVxKXS_Gt2QzqaT4ZHpqNxSNnTxPq4kFETb8mEDNE8C3vEqiKpwWkDN9NVuNXCVyOn1QrbzbN1UNBT9xUdO3QUiJTp5UGRa4UKIe0uSO93G6T0srcmKzNU6nGOfMApYooevJqQvWxoZluxykXytEPvpHO35IjycmeiMq40N2xXcEHkH m4VB HmlZKaXpEAQ94xpsTcGa8_OoCLdkL1QvDMOv2 Sl3i9CA0VqZt_CF10aWNP2v1bD38lZz01hpWEpMSs6UMNwkM3FBOazsf59EAd2OQXc4NA08YmXPUA5jHsALpJWXYv4QnfCaf8VCYnrIju5xWi HP6wUjg_6GXVYACC9D33Jn5k6xZj kjcpab0 UvifB70S9nHZWnKNfLyqj3wR9SUjrRfv6Lo2nAz0LGaPwWEKWVHgTRffwsLjaCVKgCbHmrTxSIFeXFsOTmI5PztkvzvCd0Mcls7J_7Ua0wbUdq8lyQPGb2taQpH6dMQUwhg=-G34AAGRpXUu7KLxQOiCdnMAB8S9pAZ28xRxgbmNX8BpkQfQaxTae_1R3N65unHF9j8_OTsgtJAnkDlhNpFzqQ5Loe7fiOb676YLprhB4XeBvCyroYmw97UM8vSuwBQ==-e  (viber.exe)

1 / 68      (Adware)
http://www.signsafebyte.com/pHfrKnznmSdOw 5WjIV3wcay ZI8ZZHRjQzjZQk7YArmB 7H8_5bliR2mfoB08fkpqqzkD2jdxX1oFvGmLDaMuhoJAJVGovauzT3vqZpsY5IUXiDSGpupWdoDIZgMBDgFoiz78p Dr2ECy3KbGtUxnriBYW_TgvY5 VS6u8MctRzCEcW vbvf8kNOmL5BUVeZfPGjVhwaQKXkI5C2 ZfwLlHrW8J brjn_lG9tXhOXGbrgc7mAhkbQbDBijEWcJIe4xewEUz4K6dK6IuS8A1jcVx4_qmErgAsIfOZGxq9jJctuyHdxK9Cym JicIUmw57G3NPFk9T1idbXKEm9YVxE5HdTikT1lIj kwKraFnv9tQGtQ923AI9VokWAkxeXDvB2UNtz2zzEyIGkB0wnMGczNhPWE0uXvG5hbQyx3HrQ_2dmtxzNIO85ORf6JqMe q_S4vlGuhKJ4_8mdomlfU3irWG fFkTtuetd7kAtNnFmSx5HQFc=-G6QAAGRpXUu7CL5cMkCdHFCg9JW0sCQOEktjaZ7esH1eoTSSz4G3MRpw5f_QtsuNpxInHk_ko8CGTICplBrFIdJejwUiSkHJx7RI8D5rfu_vVbfeeJVIcHyQ7 oRtHyqc9z6uFBbHis=  (happy_wheels.exe)

1 / 68      (Adware)
http://www.bestmetagrab.com/4i67Ce3 uhb6tbPZWroOn8UDM5FW8cVj650sb7 imeXCLssfT1FDYUAgGIaOtBQ5V40GiRfFnFI vhhf Dbo5HIqXBSO2iDCArDCciw0z5W7SaxQGiAu_9 XeOSy0aLEckVemGDwbMaAruFUwbDZRSKhugSUG4CK0igVYH04M9UdVH6gih4D4KRArjIWhqmN9ctN_Nkx-G2gAAORte69pY0lrioWEQwtTyCkHDq2ogDLJ6fM7D n4o0T6doxrfGiWy4ObIDnv4yPad7J jj4qjd6pWIIa3IAzgpahVaifVd 8TIz6  (itunes.exe)

1 / 68      (Adware)
http://www.contentmetadelivery.com/Kk AaL_55dt0_ttQT8ZWtxhdbduECzQY6LQX67WpQLKIA14UiZNLw3iR5wLF05z0fZXENrS7l3fQxV3v7HRroaP7HwlbK2I2vAl2Yxp Hzjy5MrkIfto8NnptMam_Zo_u7hsfZ0NthUpzVqwr0H_VCdQzE35XOBbqhtIxAS4cjwAFfok2NJ1rZyLCyqlbTDGn4eBj9bMz_hwtNFwQCufVaURiC0bagR3blxHzUaHpxbBJtLtw4QLIXJO_fDegPaW c7ftivCv4XNJhHz5UShtEbDq0Y U1QkLZqWv6nCwBzs6e4TdFt2UJPw08mvceRcPkpIyEN8CGqJ_icbPd4DPME_pIE5EWfI_YUWgwGD2LTE4LL0JIHl6PYY3oVV0_tsyjsy4U_W6Nj7Sr11lv8uUeMtfgrpwN9lbw 2pRgrTf_hjTTugJsBooWe1tjLd5NFad7izxYX iLdIsvBe98tHZw_2YW_WdJnS4GWZuGmd5OdoP90cQ0=-G2kAAORte69pY0lrSoWEkCmWJ6ccOLSikmt 4QPwQTcGD_3wIajNILfxuMzogm IPO_jo7S32xCOX1s pWsZk1GiF GOoKnICjVo5SxfFCMA  (picasa.exe)

1 / 68      (Adware)
http://www.bestmetagrab.com/LppgSzrLcVCYaHoPFNL7ShCvrD1JMESJKA5i9CNRbxWqRgNH yspsgoXszCDviyNeoBgGcXAhWEOdMTBUm8fmS7lWudZf8A9ApiPCBsBIO7PBE9GDjPux9qJl6n_koZd drBAJDYamFHp44o6ya9Cp27IyhwimNL6eX1wXXyg2zpdWZdb1 HV21_7Id5yPhNHGki9l7bz4NKUsvYwl_E01BXMxb nA==-G3YAAES3 X2ddlzSdUrEKCENLAmaceDwVxZQJtOxDAa6sfBQLzgUsRnUNqYBl_wF7EtwSjyeyKdAu39t UzuyRhgjV7EOUHTGBmZ06rPuGGLOQ==  (happy_wheels.exe)

1 / 68      (Adware)
http://www.bodybulkcycle.com/uobi9yxyZjehkhb6BKIrB2e2bCudfSqWn9aJUcsvqRrq1Pa7BkR4ASYmBpgcT6UkWm6WXEhfhe_Lvsf3Yh3dWP3JRc2wLGt8Mhtqo hF37bLRTDIjNCKj5APrydimtGgPKlDpbFWwspq X6NyqqiZj43KKrprI 9DlNWMpgKRW_wAqfj91 cTupsJ86bO7cXj_2A9MUmlEIaUTXo1dERk7hiy19iOFA7IsUEV0ptJu7nDu1j6D9CMMNqJMwvPb8MWxJDRcdN7s71z8XJiNe0B_wED6arZckM8S4vMuNpq8DPixspD5YCYq0XtZhN21msmS1co9H3c4ftpQ3vtsPBFWe4RQLfCvxUrD eu5ZJaL5NVYNkoUV6QPYQ1xsL4 ARQsGGjYgEdeuyk20 Xdc_C74pe KYDrqkcanu5Z5S4oWnFsLqGD5yKqWJgJqnRIhkilL mn4ff1kYAUKqZES8tVu_XUlIsh3GbwtPrVDwH5zcopVDYPqy5jFIxyB_qxGw 1VUh7YhAMBckUixw8EKHu5Pd5q7xQ==-G7MAAGRpXUu7CD1RMuBv7AwZ11hHONC3tvKXAeqGGWboOyWbgWzj49zKefvx3WPJ9T4 tzYhpRAZYEoHI46hDqZJJhix1WVkpbR 4j_3kl3bc1aNO5wFCvFFQj LSx3ZqPewdnnldRcV  (roblox.exe)

1 / 68      (Adware)
http://www.downloadpackagepresent.com/xz32Ai3spuWQZ1tkEMCPAAvTHG6C0FV EBmO3X5Q2K W5eVAH6dBdYOgrnVt w_qnPCUuDFR0Rb2HnKCM7_724As8z0D9exJ2US2Wamokr9JXQxvdq6Q0XI2PAiQUO32oOHwNcdmx3COzXVq3VJrMq0s1D71gMX45GzdHMZtRIN_b9gaNe68CNvFjq1OV9VNI2KX3tX78g0ImTl899KQtOBjY9_ooGisXsPXDVXyciwWFvRQbtQvvWjzEi53aksMtj74Xzp3emKJJYWSl4PxMiJXnIyfIa5TX5cYm8mdM4ORP5l1D aIu5Tw9otfxB_5G5PPF 8cKHkd6IJLvlAdkrWhHMPt6VLyBgtro91j7005DFUFzbm fyDF pZlD2eh0oHNbtHy_MkS9XMbmwoVWG4YK5sb0QtYtCFalT_LZkUF8AzI0yGyXX0CgoSuhAzb9A608h_rxVMyoBOHW3qN9kN2YFrsOh7rLnwIoFIgmlhzYp hxIA=-G2gAAEQ315rRhyRPUeSIGPxhXsjFAfv lnQBDTzgADjQjcFDPzhEsT3oa0xmYsHeXPF8j09nmv_PELb2_NJ g OSMBI5gkwJa3RBkzf8orQAAA==  (songr.exe)

1 / 68      (Adware)
http://www.appbundlesign.com/u2TAnJErdnocIhe4j8QGLNHjjc1w5K4B85c7kmpn QARlSPH1xy92e2I0 RiD5EPrXHTKU5kgcd5HqIHC3iUY51ckuuQJJh2yr9rwXIJHN7x_WVNlIPK Zj7niGCkyQ2m7y72xNii6 j7zaowgpDxTDSeRsLkTnr7yjXJpLkflrLzXZSFnFsFFc aXByqiVjtofcjrun54pcHVTq8M6fTFImxGsa87fYafJZpQNKG2Buv7zCMV2Pi7v5k7ld0XducnIU0E8Mv11mGyLw_k5MrOmgZbWsxp2hM15EUjylo5nz8JmqrAcGpWFZGZOBjTMmvkq0rwblLpU1ZBFqMcUq96IPmoPnOFo FfOb7OVxX72UeF1XJv10D146GxiUQ19h27i1naXxT5jU3NxksFlDvTejWU2qZhsTwzmGV0B f1aymTvRvYh9zo45ZJFTaaFLTKl62dwKrn_kUbO7EfjKfEpSB7Orgo8sFLFf6KB74BF P5lqJKDRzLypHdhvKpBxzSgTOW-G3QAAES3 X2edlyj6xwREh4aWOrkwOH_oS2ge8JhzIFuLDxUBcdRbAa1jdm3op1RS627fsiHP0f_MfsH3 3aBq8lwjVBOkBsjmk8T96sCww=  (google_talk.exe)

1 / 68      (Adware)
http://www.bestmetagrab.com/Acw4rFTeKUTvQippuyAH2Q3xOeAjt12dqPBTf130oCRn qGw3PSzrW1gxrALJOjOJiZqDbPMIt1MSeM30lgK3uAnKi3GOk84uzHvDc3PLgGAxNnm YkbhASNfmjRDoI08R075Ts_D24yXUwmEDS7eJc iFVHuHZVpJnQltmvqoVqXf2akHdMtlWCvRv1x7h23vFoB2VuTXXPCK8fY4zArEMZdstQMC85MPeV5_Ad2LwNj2yTj8OFXkx 3UQWqcL29EyJrV511JPnqxe3BPbdud5M9ESHUzrs3beE0hQFGDAU6b9yaYKLZFQZ ZpRPvSK0I__Ni_U4ZUz7kFmexp SYC1Vuov2S4mlOoUVB5jTNzpW87A1WlU6y82vz_XvM7qDzX3JvIGsit_I9NZyHkf5YJKDfVbPD1oq7jd1Whbshvjgq_LvnqaJf9dMwXExAllAHY5u2S7lPka6td73IThf80CU3XroFcKXGOY6o0Z_hUSg_ckBXQe61DTXlUkDJzStZg0RCZp-G4QAAGR3ftecU5I4lsjzS5IcqDE3OIEAsd8eJBsWnnnA3cau4C3IAuk18m3c8i97dLAxFl0P5HO4E4qHlKAE8I7IxqIPq6P8Xd8V7oMWNwUeGEg2NZHVuVpn5kO SBk=-e  (utorrent.exe)

The certificates below are also signed by BULLY UNITY LTD.

1121722482EEF9AA7C5405D8297124D131E6  (Apr 05, 2016 to Apr 06, 2017)

1121E5E3E90DBBD1A9DDCE6D8F988516B779  (Dec 29, 2014 to Dec 30, 2015)

576ED6C3B25057AC69546AA4FFAE8B4C  (Dec 24, 2014 to Dec 25, 2015)

0561C0FEA93F47093CCED2BA6A4400F1  (Dec 18, 2014 to Dec 23, 2015)

The following publishers (by Authenticode signature organization name) are related.

Bully Unity LTD

* Note, the details and description above are based on the code signing digital signature issued to BULLY UNITY LTD by GlobalSign nv-sa on August 09, 2016 with the serial number '60fcae84e0126fc8f49ec1ad'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.