Irrational Number Applications

Publisher Information

Irrational Number Applications is a brand of the Sambreel/Yontoo group, a web advertising company located in Carlsbad, CA. It is part of the Yontoo/Sambreel group and distributes web browser add-ons, typically potentially unwanted and adware in nature, that are designed to modify a user's typical search beahvior as well as display context and popup advertising. There is one additional code signing certificate issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
2/25/2014 7:00:00 PM

Valid to:
2/26/2015 6:59:59 PM

Subject:
CN=Irrational Number Applications, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Irrational Number Applications, L=St. James, S=St. James, C=BB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
68a3a4fcf1fe292bb14a5717d3754944

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Yontoo.Installer, PUP.Yontoo.IrrationalNumberApplications (M), PUP.Yontoo (M)
100.00%

Malwarebytes
PUP.Optional.WebShield.A, PUP.Optional.PullUpdate.C
22.22%

Trend Micro House Call
Suspicious_GEN.F47V1105
22.22%

Agnitum Outpost
PUA.PullUpdate
22.22%

VIPRE Antivirus
Injekt, PullUpdate
22.22%

ESET NOD32
MSIL/Adware.PullUpdate, MSIL/Adware.PullUpdate (variant)
22.22%

AVG
Downloader
22.22%

avast!
Win32:Adware-gen [Adw]
11.11%

IKARUS anti.virus
AdWare.Agent
11.11%

Kaspersky
not-a-virus:AdWare.MSIL.PullUpdate
11.11%

1 / 68      (Adware)
uninstall.exe  (91865c0fa1686716bb8b5318207f1605)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
webshield64.dll  (dda07b88a13b2ca3a824be1e38a98c31)

1 / 68      (Adware)

13 / 68    (Adware)
webshield.dll  (e0af941bb432058e20091a975a87770f)

3 / 68      (Adware)
uninstall.exe  (ed349595042a082bfb135b4a0ddd9f99)

1 / 68      (Adware)

9 / 68      (Adware)
setup.exe  (8dc331a4c09abcea1391ced833f5b027)

The following certificate is also signed by Irrational Number Applications.

637F0A74512CF65B05B3A5A0241D6624  (Jan 19, 2015 to Mar 20, 2016)

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to Irrational Number Applications by VeriSign, Inc. on February 25, 2014 with the serial number '68a3a4fcf1fe292bb14a5717d3754944'.