home

Appstein

Publisher Information

Appstein is a brand of the Sambreel/Yontoo group, a web advertising company located in Carlsbad, CA. The company is a primary distributor of unwanted software. It is part of the Yontoo/Sambreel group and distributes web browser add-ons, typically potentially unwanted and adware in nature, that are designed to modify a user's typical search beahvior as well as display context and popup advertising. There is one additional code signing certificate issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
5/2/2014 8:00:00 AM

Valid to:
5/3/2015 7:59:59 AM

Subject:
CN=Appstein, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Appstein, L=San Diego, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
06773ab7ec074782d28f824f3c5632c1

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Yontoo (M), Adware.Yontoo (M)
100.00%

1 / 68      (Adware)
appstein.browseradapter64.exe  (ac859b100c33db0972c112e776f760d7)

1 / 68      (Adware)
appstein.browseradapter.exe  (983d7824de22df24143651e10f441236)

1 / 68      (Adware)
{d1c0eac9-f469-40b8-943e-bad63f865887}64.dll (XVRNT by TODO: <Company name>)  (45366f0a22db46393e40457087d13c18)

1 / 68      (Adware)
{d1c0eac9-f469-40b8-943e-bad63f865887}.dll (XVRNT by TODO: <Company name>)  (2a0ca094356f1c4fa8fc02eef70795c2)

1 / 68      (Adware)
d1c0eac9f46940b8943e64.dll  (7333e205d09d7af1870bde7934c33c72)

1 / 68      (Adware)
d1c0eac9f46940b8943e.dll  (80339f82db1eb85025aa879492149cc7)

1 / 68      (Adware)
appstein.expextdll.dll  (07a918cbc2baec6d90d93e184dff8a70)

1 / 68      (Adware)
Appstein.BrowserAdapter.dll  (cb795d39c0a8b638250156e055fa3471)

1 / 68      (Adware)
{d1c0eac9-f469-40b8-943e-bad63f865887}64.dll (XVRNT by TODO: <Company name>)  (03cb65d604b7f661a24ae083e2725144)

1 / 68      (Adware)
d1c0eac9f46940b8943e64.dll  (437f81cd564db9c08c18052021b8b70c)

1 / 68      (Adware)
d1c0eac9f46940b8943e.dll  (d861b4a31ec2b40c85dd3b4bb4c73e03)

1 / 68      (Adware)
appstein.browseradapter64.exe  (d523423f4b6609936b593a028c2403d6)

1 / 68      (Adware)
{ba042835-a68a-44dd-9180-7bfde676c59c}64.dll (XVRNT by TODO: <Company name>)  (63b1ca5287e29060ba14f2991e6762bc)

1 / 68      (Adware)
{ba042835-a68a-44dd-9180-7bfde676c59c}.dll (XVRNT by TODO: <Company name>)  (60c3a146be410d3b33c17038cb963b9f)

1 / 68      (Adware)
{2a4cb6b2-7a73-44f9-b225-439406424296}64.dll (XVRNT by TODO: <Company name>)  (4df2beeb654be829a64447e897c19761)

1 / 68      (Adware)
{2a4cb6b2-7a73-44f9-b225-439406424296}.dll (XVRNT by TODO: <Company name>)  (48f241ee71de4166265122ac2eef4b75)

1 / 68      (Adware)
ba042835a68a44dd918064.dll  (1f86e01778006ccf5e679340196c00be)

1 / 68      (Adware)
ba042835a68a44dd9180.dll  (2b50d21a3e492501bd580e1ce7111ac1)

1 / 68      (Adware)
2a4cb6b27a7344f9b22564.dll  (b7e0e25a3320addb95b0d639dabec13f)

1 / 68      (Adware)
2a4cb6b27a7344f9b225.dll  (38303995dbc8e457ca26db59fb37e13a)

1 / 68      (Adware)
appsteinuninstall.exe  (6b29a6e4e71b6b9ad9300a4d789146a1)

1 / 68      (Adware)
Appstein.exe  (63b41a9194281f5dbd481ab84c9252f9)

1 / 68      (Adware)
appsteinuninstall.exe  (8bc55acb43917d6700d615ede6350ff7)

1 / 68      (Adware)
{eedce47b-d90f-4afb-942e-94f60c8cc0e1}64.dll (XVRNT by TODO: <Company name>)  (64fa849c074dee1287577d40745295d3)

1 / 68      (Adware)
{eedce47b-d90f-4afb-942e-94f60c8cc0e1}.dll (XVRNT by TODO: <Company name>)  (0168a18a684c4c345f0a30a6077df16a)

1 / 68      (Adware)
{d6fb5a62-de93-4ea7-9aa0-e88a20453447}64.dll (XVRNT by TODO: <Company name>)  (63fe72975cd78f07d0191a2cbeeed5dd)

1 / 68      (Adware)
{d6fb5a62-de93-4ea7-9aa0-e88a20453447}.dll (XVRNT by TODO: <Company name>)  (32b38e68e02895dda44ea5ee6f6f355a)

1 / 68      (Adware)
{d1c0eac9-f469-40b8-943e-bad63f865887}64.dll (XVRNT by TODO: <Company name>)  (160abce3acdc54f3973cf67cf6972401)

1 / 68      (Adware)
{d1c0eac9-f469-40b8-943e-bad63f865887}.dll (XVRNT by TODO: <Company name>)  (3ab3214fec7b1ad2adf0e0a335985211)

1 / 68      (Adware)
{ba042835-a68a-44dd-9180-7bfde676c59c}64.dll (XVRNT by TODO: <Company name>)  (8886750fb497a8e4ed787a854cdf52d7)

 
Latest 30 of 361 files

The following certificate is also signed by Appstein.

3E17E7A30AE5D0DA73F3DB70DE776DDE  (May 04, 2015 to Jun 03, 2016)

* Note, the details and description above are based on the code signing digital signature issued to Appstein by VeriSign, Inc. on May 02, 2014 with the serial number '06773ab7ec074782d28f824f3c5632c1'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.