» WunderWeb
Digital Signature
Analysis
Files (2,183)
Related (76)

WunderWeb

Publisher Information

WunderWeb is a brand of the Sambreel/Yontoo group, a web advertising company located in Carlsbad, CA. The company is a primary distributor of unwanted software. It is part of the Yontoo/Sambreel group and distributes web browser add-ons, typically potentially unwanted and adware in nature, that are designed to modify a user's typical search beahvior as well as display context and popup advertising.

Authority:

VeriSign, Inc.

Valid from:

8/13/2013 9:00:00 AM

Valid to:

8/14/2015 8:59:59 AM

Subject:

CN=WunderWeb, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=WunderWeb, L=San Diego, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

766c8ed1334566ab295138a99fe038d9

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Yontoo (M), Adware.Yontoo (M)

100.00%

1 / 68 (Adware)

wunderweb.expextdll.dll (eb08e8b42ac2b5e76bbaa985e9592b4a)

1 / 68 (Adware)

0aeeb01430db4ea7bdd2.dll (5d9407ba2d19061468abd4f1bcb84dbd)

1 / 68 (Adware)

utilwunderweb.exe (720836ac86009bfed7030750503ce8f6)

1 / 68 (Adware)

{8f2b0357-828e-4fe1-a15b-36ba1c30b09f}w.sys (StdLib) (60492efee1cf3aa698a55a8217eb3cf6)

1 / 68 (Adware)

{5a80bbca-2cdb-4b1a-a411-e8dc143d5b1b}w.sys (StdLib) (554210e49c8e34b86b3209f1846aa6ed)

1 / 68 (Adware)

{01c58c2c-eecb-478a-873a-ac45e29d0800}w.sys (StdLib) (d956f1b54c1032b226267c1cb0df2af3)

1 / 68 (Adware)

{bafd8a28-77ef-47fc-8e80-3d61874487e6}.dll (XVRNT by TODO: <Company name>) (18d93ddab51ba6e6ec69321457663fe8)

1 / 68 (Adware)

{7006c87d-f233-4913-a910-f17776055811}64.dll (XVRNT by TODO: <Company name>) (f7e05f16e3579dcce5dd3863c8d78e62)

1 / 68 (Adware)

{7006c87d-f233-4913-a910-f17776055811}.dll (XVRNT by TODO: <Company name>) (426d144c54433c8724753d22b29d06fe)

1 / 68 (Adware)

ceffdc8511b74c5cad96c7d4db7a528464.dll (by TODO: <Company name>) (8541b4e18d70d90a794d942ede828402)

1 / 68 (Adware)

ceffdc8511b74c5cad96c7d4db7a5284.dll (by TODO: <Company name>) (9b5341aa7ab29655f017bca145a44a8d)

1 / 68 (Adware)

ceffdc8511b74c5cad9664.dll (99898bfcb0d48d29291af977f0a82ab9)

1 / 68 (Adware)

ceffdc8511b74c5cad96.dll (f8168dbccdfb32117158440bad2fd3e1)

1 / 68 (Adware)

cd0b1e8f08a54df1aabfca8dcf3a8af464.dll (by TODO: <Company name>) (97e88b351d74718fe915b011eae82217)

1 / 68 (Adware)

cd0b1e8f08a54df1aabfca8dcf3a8af4.dll (by TODO: <Company name>) (d0e33a1f3b0efd82daea7f0cb6143197)

1 / 68 (Adware)

cd0b1e8f08a54df1aabf64.dll (5d9e5407e33908ba76a39a98a191565f)

1 / 68 (Adware)

cd0b1e8f08a54df1aabf.dll (9484c1ba6ba2f2ba31b3c105fa3651e3)

1 / 68 (Adware)

c61d58cad29d4624b2087dd4312997b464.dll (by TODO: <Company name>) (4c9ff5ee94796cae08bd8b6fdf1e21b6)

1 / 68 (Adware)

c61d58cad29d4624b2087dd4312997b4.dll (by TODO: <Company name>) (3d577bb17229f4d4cb3ab93859b0376b)

1 / 68 (Adware)

c61d58cad29d4624b20864.dll (e1b39b8e5595e8aedceb94b458d76a91)

1 / 68 (Adware)

c61d58cad29d4624b208.dll (0aa548a8e995a6e9cd72a736632602f7)

1 / 68 (Adware)

bffa22a1d535453cbd4364.dll (f83339b473219e3710043f8e787f050d)

1 / 68 (Adware)

bffa22a1d535453cbd435fda0fee731a64.dll (by TODO: <Company name>) (6990fb15a0c516d809a52c6ce89191eb)

1 / 68 (Adware)

bffa22a1d535453cbd435fda0fee731a.dll (by TODO: <Company name>) (cd2755930d6319e57da2d2d1fefa16cd)

1 / 68 (Adware)

bffa22a1d535453cbd43.dll (589d6ee9514fbdf5cba3a807599f5155)

1 / 68 (Adware)

b5ce9aeada64.dll (3deba9e67b1a8888434129aca487783b)

1 / 68 (Adware)

b5ce9aeada.dll (2ad34993c28de95f7c371f06d9094563)

1 / 68 (Adware)

b5ce64.dll (by TODO: <Company name>) (043c85140997dc1bb71f82b672fe80c0)

1 / 68 (Adware)

b5ce.dll (by TODO: <Company name>) (2c21f724956d37fe0ead3c86592f8c8b)

1 / 68 (Adware)

a64e9cd723d7465fae24992c92cd53da64.dll (by TODO: <Company name>) (0c7c7339e5902872c79c9ff4342873fa)

Latest 30 of 2,183 files

The following publishers (by Authenticode signature organization name) are related.

30 of 76 publishers

* Note, the details and description above are based on the code signing digital signature issued to WunderWeb by VeriSign, Inc. on August 13, 2013 with the serial number '766c8ed1334566ab295138a99fe038d9'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.