» fassurun
Digital Signature
Analysis
Files (694)
Downloads (1)
Related (71)

fassurun

Publisher Information

fassurun is a brand of the Sambreel/Yontoo group, a web advertising company located in Carlsbad, CA. The company is a primary distributor of unwanted software. It is part of the Yontoo/Sambreel group and distributes web browser add-ons, typically potentially unwanted and adware in nature, that are designed to modify a user's typical search beahvior as well as display context and popup advertising.

Authority:

VeriSign, Inc.

Valid from:

8/21/2013 3:00:00 AM

Valid to:

8/21/2015 2:59:59 AM

Subject:

CN=fassurun, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=fassurun, L=San Diego, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

6ea3a2d62f7379560af4974e60282338

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Yontoo (M), Adware.Yontoo (M)

100.00%

1 / 68 (Adware)

maintainer.bak (f985e522731c431e266ffd2b6228b418)

1 / 68 (Adware)

fassurun.FirstRun.exe (FirstRun) (eb769ea6333f2e4f1f3da035624f1574)

1 / 68 (Adware)

maintainer.bak (3498c67b0d488f61b20673fdd5cb4e32)

1 / 68 (Adware)

fassurun.exe (cfaa6d116edecb3003895251b8beb874)

1 / 68 (Adware)

fassurun.exe (faa9a5fdfeb630264f59c32b66d80cf9)

1 / 68 (Adware)

cd6aa099907244f1a84064.dll (22d3e9d756a9e5d400947442ec319fde)

1 / 68 (Adware)

fassurun.FirstRun.exe (FirstRun) (a7b86e498a31536232038b992ace9a07)

1 / 68 (Adware)

{696697c2-0537-45bd-b3da-9e80a9e05283}w.sys (StdLib) (8a7547e937dd2a052746a136fb2b865b)

1 / 68 (Adware)

fassurun2015080918.exe (0308806c33604f0e1180c350af29cbb7)

1 / 68 (Adware)

{cd6aa099-9072-44f1-a840-a5e78bf30cd8}w64.sys (StdLib) (f9a3b2ef7588c8e6e728cc7b7ad9d7dc)

1 / 68 (Adware)

xtlsapp.dll (0f624a0a8382110af188bd36fe19015b)

1 / 68 (Adware)

fassurun.expextdll.dll (cbf698f418d8cada43f41bb9986504a5)

1 / 68 (Adware)

cd6aa099907244f1a84064.dll (8236a0e533f742cdc85b40081501f262)

1 / 68 (Adware)

fassurunbho.dll (fassurun) (5dd4c64b1a8e18f316e0293fe7c6fb01)

1 / 68 (Adware)

updatefassurun.exe (a56a49af07f596343923b9ecf29324f7)

1 / 68 (Adware)

{21c63c07-3dae-48cc-95ab-ff9287f82f6b}.dll (XVRNT by TODO: <Company name>) (d8ea67d4d9b1ca50ca07430bdfa10edd)

1 / 68 (Adware)

21c63c073dae48cc95ab.dll (9eab4c263dcbfb66b5b1073cdc84521c)

1 / 68 (Adware)

fassurunbho.dll (fassurun) (d483a10d569249fbceef6abb1dad6817)

1 / 68 (Adware)

{21c63c07-3dae-48cc-95ab-ff9287f82f6b}.dll (XVRNT by TODO: <Company name>) (15ae4644a1e1070510f587423f181749)

1 / 68 (Adware)

fassurun.browseradapter.exe (96e9d3a1985d78e21034341a436c0816)

1 / 68 (Adware)

{cd6aa099-9072-44f1-a840-a5e78bf30cd8}w64.sys (StdLib) (240d09ea3bad6e8a67113534d9864e17)

1 / 68 (Adware)

maintainer.bak (6ceaabd1d1897cf663737c4a3606b58c)

1 / 68 (Adware)

{21c63c07-3dae-48cc-95ab-ff9287f82f6b}w.sys (StdLib) (78f511fabd11b3a3a96862dba0c8c8bc)

1 / 68 (Adware)

fassurunBrowserFilter.exe (b05498f6cfa6c9b63b6cacbfec2dd95f)

1 / 68 (Adware)

{cd6aa099-9072-44f1-a840-a5e78bf30cd8}w.sys (StdLib) (b8d346e6b1ede718c0a41ef15f3f056e)

1 / 68 (Adware)

{cd6aa099-9072-44f1-a840-a5e78bf30cd8}w64.sys (StdLib) (6026689c0a680892233cb6d10444eb9a)

1 / 68 (Adware)

maintainer.exe (b11b3b67fd1d8493559d8fa29c34a6da)

1 / 68 (Adware)

fassurun.FirstRun.exe (FirstRun) (ce43a0865067bfca4c5d90e5cd9fe2d0)

1 / 68 (Adware)

{21c63c07-3dae-48cc-95ab-ff9287f82f6b}64.dll (XVRNT by TODO: <Company name>) (09930fbb922a7ee0115106e973f7177f)

1 / 68 (Adware)

{21c63c07-3dae-48cc-95ab-ff9287f82f6b}.dll (XVRNT by TODO: <Company name>) (df6831bdd13db062392921b9af83ed05)

Latest 30 of 694 files

Downloads URLs for files signed by fassurun.

1 / 68 (Adware)

http://wpc.0952.edgecastcdn.net/800952/.../setup.exe (0706e0215dbb5d7a22f4f17ee10dbe55)

The following publishers (by Authenticode signature organization name) are related.

30 of 71 publishers

* Note, the details and description above are based on the code signing digital signature issued to fassurun by VeriSign, Inc. on August 21, 2013 with the serial number '6ea3a2d62f7379560af4974e60282338'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.