home

clipqube

Publisher Information

clipqube is a brand of the Sambreel/Yontoo group, a web advertising company located in Carlsbad, CA. The company is a primary distributor of unwanted software. It is part of the Yontoo/Sambreel group and distributes web browser add-ons, typically potentially unwanted and adware in nature, that are designed to modify a user's typical search beahvior as well as display context and popup advertising. There is one additional code signing certificate issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
10/30/2014 8:00:00 PM

Valid to:
11/18/2015 6:59:59 PM

Subject:
CN=clipqube, O=clipqube, L=Tel Aviv, S=Israel, C=IL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1fcbfdbead545580f2531ecd63a07db9

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Yontoo (M), Adware.Bundlore (M)
100.00%

1 / 68      (Adware)
setup.exe  (43d1069ae850ea0cd2a6eba4688b4693)

1 / 68      (Adware)
setup.exe  (c964ff6ca6e480da7ca7f62071a9f6ef)

1 / 68      (Adware)
setup.exe  (a35efb11b01a317790550b2d07d16d52)

1 / 68      (Adware)
setup.exe  (0b61ee5b28ac8c556a7d3f0b9e108bc8)

1 / 68      (Adware)
setup.exe  (bf1aefd714de3758b9a70b6ded46abf8)

1 / 68      (Adware)
setup.exe  (2ad404b599548a659860df6b60d81f4c)

1 / 68      (Adware)
mediadownloader.exe  (711ed14ba0d9b524598151426e31eecf)

1 / 68      (Adware)
setup.exe  (c2b6b773f225ac032c1a1eece89a74ae)

1 / 68      (Adware)
setup.exe  (19bfd12bdc3f771838b3a600f15ec3ee)

1 / 68      (Adware)
setup.exe  (5e8f6c758d8da8852a0a9d40cf6ec71c)

1 / 68      (Adware)
setup.exe  (26f969827ee0aa1dd733c226630a7f18)

1 / 68      (Adware)
setup.exe  (d651b0cfd5d34b2ef1a4fda91fc2f9d2)

1 / 68      (Adware)
setup.exe  (e0eb09b878e9e13b63194f06ec992535)

1 / 68      (Adware)
setup.exe  (90c4a7ad3d421090e0a8c03e9cdddf60)

1 / 68      (Adware)
Setup.exe  (4ceeb01501f0b9dc5b45cf9482a16d79)

1 / 68      (Adware)
Setup.exe  (25d5af33520ebc57821c17c31d9d6490)

1 / 68      (Adware)
Setup.exe  (ef8a55e71f4bfa0559206f2406b767bd)

1 / 68      (Adware)
Setup.exe  (eb6ddd7ace0bafe41d6fb0671c7c3592)

1 / 68      (Adware)
Setup.exe  (e0ff1e73f376a0b9ace93b7cbed7624f)

1 / 68      (Adware)
Setup.exe  (1d846a3c32aebd1e398d21bf64ed1f2b)

1 / 68      (Adware)
Setup.exe  (29d25bedc505486c594fca95b8d4142d)

1 / 68      (Adware)
Setup.exe  (a732045a07ac4c80c3e629dba858b58f)

1 / 68      (Adware)
Setup.exe  (fe6498a2caad8efcb0cadfbf8b2c7ce9)

1 / 68      (Adware)
Setup.exe  (90cbe8cc8a7dd3b622f106bfa8e7be82)

1 / 68      (Adware)
Setup.exe  (65de6596ea8937e4db59f5a82368f11c)

1 / 68      (Adware)
Setup.exe  (83e4f8cdcfc59c96bbeb6c30378d91c8)

1 / 68      (Adware)
setup.exe  (24a196fa369ef0872e60eb8f058baac9)

1 / 68      (Adware)
setup.exe  (e1852df4642f790b1715f7d25f3ae333)

1 / 68      (Adware)
setup.exe  (9070a770dbe24129bc508aa97ef42d9c)

1 / 68      (Adware)
setup.exe  (06a3963c95390de9ab6e7dc94a8c68a4)

 
Latest 30 of 3,597 files

Downloads URLs for files signed by clipqube.

1 / 68      (Adware)
http://cdn.downloadcobra.com/.../setup.exe  (711ed14ba0d9b524598151426e31eecf)

1 / 68      (Adware)
http://mpdotrk.com/mt/.../&subid1=dK73CH883ESG237EGPJ210D0  (setup.exe)

1 / 68      (Adware)
http://cdn.downloadcobra.com/.../setup.exe  (f06e73073984967d0dedb29ca415a033)

The following certificate is also signed by clipqube.

1196F308FE61A4FC96B83D564942BBB4  (Nov 18, 2013 to Nov 19, 2014)

* Note, the details and description above are based on the code signing digital signature issued to clipqube by Thawte, Inc. on October 30, 2014 with the serial number '1fcbfdbead545580f2531ecd63a07db9'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.