home

NOSIBAY

Publisher Information

NOSIBAY is a software developer located in Montpellier, Herault in France*. The publisher primarily developes software that can be classified as adware. Thre are 8 additional code signing certificates issued to this publisher.
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
5/28/2009 10:50:27 AM

Valid to:
6/4/2010 3:12:51 PM

Subject:
CN=NOSIBAY, OU=Provided by TBS INTERNET http://www.tbs-certificats.com/, OU=Secure Application Development Team, O=NOSIBAY, L=Montpellier, S=Herault, C=FR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
7bdab8d9f7db7da29da510a8659cec65

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.NOSIBAY.Installer (M), PUP.NOSIBAY (M), PUP (M)
100.00%

1 / 68      (PUP)
install_bubbledock.exe (Bubble Dock by Nosibay)  (69450e734fb5e0f42cdeb1ee96b4bfb0)

1 / 68      (PUP)
lbubble dock.exe (Bubble Dock by Nosibay)  (bef7b56cb3a0cecd5f36e2739609965d)

1 / 68      (PUP)
Bubble Dock.exe (Bubble Dock by Nosibay)  (55625b20821f1a2aa036025e2f835907)

1 / 68      (PUP)
install_bubbledock.exe (Bubble Dock by Nosibay)  (942e2ada4a0d08cfd357cebd531d1c39)

1 / 68      (PUP)
lwidget lequipe.fr.exe (Widget LEquipe.fr by Widget L'equipe.fr)  (2dbafb2513747094532ae5a3bc7aa51a)

1 / 68      (PUP)
VPbubble.exe (VPbubble by vente-privee.com)  (be28965396bfce8ad2c02a8214707768)

1 / 68      (PUP)
launcher.exe (VPbubble by vente-privee.com)  (33b4a88a0138650309381d1de6f12675)

1 / 68      (PUP)
Bubble Dock.exe (Bubble Dock by Nosibay)  (70c367fdbb36d1722806a29142a1ea89)

1 / 68      (PUP)
lbubble dock.exe (Bubble Dock by Nosibay)  (f1527557c288616c7ca1ea6559e03773)

1 / 68      (PUP)
install_bubbledock.exe (Bubble Dock by Nosibay)  (191c20d0b0c7ae7ffab80aa21cf8ac83)

1 / 68      (PUP)
lbubble dock.exe (Bubble Dock by Nosibay)  (0294368f8223d205a055fd242337e6ea)

1 / 68      (PUP)
Bubble Dock.exe (Bubble Dock by Nosibay)  (47055ba86f2977545484323f4822f492)

1 / 68      (PUP)
installationwidgetlequipe.exe (Widget LEquipe.fr by Widget L'equipe.fr)  (185956e82c0033a8fae9f88eb6e3cbb5)

1 / 68      (PUP)
patchvpbubble.exe (VPbubble by vente-privee.com)  (4796ff00dad85caedb6573d0ced24381)

1 / 68      (PUP)
lbubble foot.exe (Bubble Foot by Nosibay)  (97efe1768503d78725c5c255eff05e4c)

1 / 68      (PUP)
Bubble Foot.exe (Bubble Foot by Nosibay)  (d2db647d7d53500a3afe27f910b7baa9)

1 / 68      (PUP)
Widget LEquipe.fr.exe (Widget LEquipe.fr by Widget L'equipe.fr)  (2ee9c9bcab3934d82123dad92976b1df)

1 / 68      (PUP)
VPbubble.exe (VPbubble by vente-privee.com)  (bb7663dd290776be01014c59f74c8f82)

1 / 68      (PUP)
launcher.exe (VPbubble by vente-privee.com)  (e704191f063bfdc4008758df0d1ff4c3)

1 / 68      (PUP)
VPbubble.exe (VPbubble by vente-privee.com)  (96df41842400691775ea5115685ffb6a)

1 / 68      (PUP)
launcher.exe (VPbubble by vente-privee.com)  (f6f090daeb2e5c8b8767062c8e5acab0)

1 / 68      (PUP)
install_bubbledock.exe (Bubble Dock by Nosibay)  (4620ccc3f7ab87644735334fae9615fb)

1 / 68      (PUP)
setupvpbubble.exe (VPbubble by vente-privee.com)  (b43ef35b33ac1db1ec639d568216f0b6)

The certificates below are also signed by NOSIBAY.

5F167BED0657C4880A327813C55256A5  (Oct 25, 2015 to Jan 24, 2017)

52E368957AD1C7202A103C7CFD7BD6C2  (Sep 25, 2014 to Dec 26, 2015)

4F1CA396B891ED381AFEECC074DB8714  (Sep 21, 2013 to Nov 21, 2014)

15D415FC07F39945D54BD293F72D8A5F  (Sep 16, 2012 to Oct 17, 2013)

48B8CBA6DE2D386D8CD5DE3D94F2FAEE  (Jun 28, 2011 to Jul 28, 2012)

0FCD5C77E68CFE177F34E23FB835BDD8  (May 28, 2010 to Jun 28, 2011)

307981C65D6A8119A688907EEFA9D836  (May 14, 2008 to Jun 04, 2009)

1782D0A558B8C92D9E3A1CA9993F2050  (Jun 05, 2007 to Jun 04, 2008)

* Note, the details and description above are based on the code signing digital signature issued to NOSIBAY by Thawte Consulting (Pty) Ltd. on May 28, 2009 with the serial number '7bdab8d9f7db7da29da510a8659cec65'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.