» Savingsbull
Digital Signature
Analysis
Files (34)
Downloads (6)
Distribution (2)
Related (32)

Savingsbull

Publisher Information

Savingsbull is a software developer located in Sarasota, Florida in the United States*. The company is a primary distributor of unwanted software.

Authority:

GoDaddy.com, Inc.

Valid from:

1/16/2014 8:47:15 PM

Valid to:

1/16/2015 8:47:15 PM

Subject:

CN=Savingsbull, O=Savingsbull, L=Sarasota, S=Florida, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

0428c93a073e5e

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Service.Savingsbull.V, PUP.Savingsbull.V, PUP.Savingsbull.R, PUP.Savingsbull.H, PUP.Savingsbull.L, PUP.Savingsbull.N, PUP.Savingsbull.z, PUP.Savingsbull.CC, PUP.Adpeak.Savingsbull.Installer (M), PUP.Adpeak.Savingsbull (M), PUP.Adpeak (M)

100.00%

Malwarebytes

PUP.Optional.Savingsbull

55.88%

Trend Micro House Call

TROJ_GE.275FE3D3, TROJ_GE.21F04DFD, TROJ_GEN.F47V0212, TROJ_GE.269D89E4, TROJ_GEN.F47V0305, TROJ_GEN.F47V0221, TROJ_GEN.F47V0217

55.88%

ESET NOD32

Win64/Adware.Adpeak (variant), Win32/AdWare.Adpeak (variant)

52.94%

MicroWorld eScan

Adware.Agent.NXR

47.06%

nProtect

Adware.Adpeak.K, Adware.Agent.NXR

47.06%

McAfee

Artemis!C5970CEB6125, Artemis!19EEBAFA967B, Artemis!AB95106E9286, Artemis!6D7F8FB0443C, Artemis!2097F52E2271, Artemis!262A578D7745

47.06%

Agnitum Outpost

PUA.Adpeak

47.06%

avast!

BullSave-B [Adw], Win32:BHO-ALX [Trj], NSIS:BullSave-B [Adw]

47.06%

Bitdefender

Adware.Agent.NXR

47.06%

1 / 68 (Adware)

6a248f.msi (9e085844c0e22d8d53085afd702079dd)

1 / 68 (Adware)

t.msi (7437082afe54cdb134c90f2bcc2bf37e)

1 / 68 (Adware)

4c16b6.msi (415226c93d98f72b203612c37c0ab264)

1 / 68 (Adware)

installfilter32.msi (8108ae9ec2fb3bf736f8732a3c1f77b2)

1 / 68 (Adware)

savingbulls_2901_de-50d78dfa.exe (f248880c78a4c741fce578b3db11dc55)

1 / 68 (Adware)

installdaddy_savingsbull.exe (fd6493d38c059adf446dc23022412ac8)

1 / 68 (Adware)

air2603.exe (a46cd56ab54ddfc6c43b743dbf5372ed)

1 / 68 (Adware)

t.msi (5c8e2157333e1e6a2a5e24da0bbb4091)

1 / 68 (Adware)

installfilter64.msi (be185270bbd091581d588ac9391a3b81)

1 / 68 (Adware)

customactionuninstall.vir (9a5fcefc3328e641ac85cec9d1317f2c)

1 / 68 (Adware)

customactioninstall.vir (2be83980a926ff5ce99ded9abfd82d08)

1 / 68 (Adware)

installfilter64.msi (3af7b8083fdd852a6dda4ffe10fc6044)

31 / 68 (Adware)

savingsbull_setup.exe (096918828503794f0a9afd0ce257f213)

31 / 68 (Adware)

7db584994bc6d9e34a2205b920380113.exe (7db584994bc6d9e34a2205b920380113)

24 / 68 (Adware)

savingbulls_2901_en-b5d7e360.exe (a1ac834e403b997915af8c65d5f9ee32)

23 / 68 (Adware)

w3i_savingsbull_58ea3283-ebee-43e4-9b29-44c6e16c6b48.exe (1da8521c24728771710227bbbe9be828)

25 / 68 (Adware)

tuguu_us_savingsbull_e685b607-05bd-4c58-84d3-d5023ceda723.exe (3871aaed23a7d827f1fab2089125a87f)

44 / 68 (Adware)

savingsbull_e2a6382b-f9ae-4e06-b7cd-dc54d3298d15.exe (f5eb91320f5ea6b7d35b77c4a372199c)

21 / 68 (Adware)

tuguu_us_savingsbull_e685b607-05bd-4c58-84d3-d5023ceda723.exe (56daef0ab1a4e9d3fbe36faa7d6e25c8)

27 / 68 (Adware)

down.4268.savingsbullde_setup.exe (b3892884800cd03006849dd2ab230d26)

25 / 68 (Adware)

savingsbull_2182014.exe (262a578d77453746049978d7d222dfd0)

23 / 68 (Adware)

covus_savingsbull_e9efb0db-0325-4476-b2d4-4147c315f455.exe (2097f52e2271b03022e56011fec4a2ff)

25 / 68 (Adware)

saving_0502_de-ec0a3c6d.exe (c5970ceb6125c9a27a82fb46acb933c3)

21 / 68 (Adware)

savingsbull_2102-9a9fd283.exe (6d7f8fb0443c7838fef8f44dd4bb65f6)

24 / 68 (Adware)

tuguu_savingsbull.exe (ab95106e92862e6d89c6e2ea7212a166)

18 / 68 (Adware)

saving_0502_usa-8d4ed69f.exe (188817ee6abfe59f2021fd84c18f0662)

2 / 68 (Adware)

ieoptimizer64.dll (adef28c00c39962d8d10529290b5af43)

1 / 68 (Adware)

ieoptimizer.dll (4b2637d1d05b95a25406b949d9d9d49d)

4 / 68 (Adware)

air6e3a.exe (8c1f2008c4756275e8589a1cf7f9eae8)

3 / 68 (Adware)

copy1-savingsbull0211.exe (fca390e3517de4ceed5aa14d4d45fea1)

Latest 30 of 34 files

Downloads URLs for files signed by Savingsbull.

23 / 68 (Adware)

https://teabag.blob.core.windows.net/public-source/downloadguide/resources/file/freemium/savingsbull/1.0/.../covus_savingsbull_E9EFB0DB-0325-4476-B2D4-4147C315F455.exe (2097f52e2271b03022e56011fec4a2ff)

4 / 68 (Adware)

http://cdn.airdlr6.com/downloads/offers/.../air_BR_savingsbull_3128B166-323A-4095-AD73-D88719C11089.exe (8c1f2008c4756275e8589a1cf7f9eae8)

4 / 68 (Adware)

http://cdn.airdlr6.com/downloads/offers/.../air_US_savingsbull_90F95EB5-0416-46BB-A51B-9A987DFB34BD.exe (8c1f2008c4756275e8589a1cf7f9eae8)

1 / 68 (Adware)

http://cdn.airdlr6.com/downloads/offers/.../1C58550B-3B5C-46C3-B5F5-29DD3158EC0B.exe (a46cd56ab54ddfc6c43b743dbf5372ed)

3 / 68 (Adware)

http://cdn.download4desktop.com/Installer/.../cbs_savingsbull_BBA5481A-926B-4561-BD79-249F618495E6.exe (fca390e3517de4ceed5aa14d4d45fea1)

3 / 68 (Adware)

http://www.savingsbull.com/savingsbull_install.exe (2193be8908d6d055b5bc1c0625e7ce51)

Distribution

The following websites host and distribute files published by Savingsbull.

cdn.download4desktop.com

www.savingsbull.com

The following publishers (by Authenticode signature organization name) are related.

Beijing AmazGame Age Internet Technology Co., Ltd.

Woolik technologies ltd

SaveSense

Liyan Liu

Outfox Tv Productions Pty Ltd

Hefei Zhimingxingtong Software&Technology Co., Ltd.

Local Weather LLC

Rollnon

Ad Businness Crown Solutions S.L.

30 of 32 publishers

* Note, the details and description above are based on the code signing digital signature issued to Savingsbull by GoDaddy.com, Inc. on January 16, 2014 with the serial number '0428c93a073e5e'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.