» PlumoWeb
Digital Signature
Analysis
Files (5,661)
Related (149)

PlumoWeb

Publisher Information

PlumoWeb is a brand of the Sambreel/Yontoo group, a web advertising company located in Carlsbad, CA. The company is a primary distributor of unwanted software. It is part of the Yontoo/Sambreel group and distributes web browser add-ons, typically potentially unwanted and adware in nature, that are designed to modify a user's typical search beahvior as well as display context and popup advertising.

Authority:

VeriSign, Inc.

Valid from:

8/4/2014 9:00:00 PM

Valid to:

8/5/2015 8:59:59 PM

Subject:

CN=PlumoWeb, O=PlumoWeb, L=Santa Monica, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

792d14e276e932d00a4f272c4ed5b70e

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Yontoo (M)

100.00%

1 / 68 (Adware)

{c114c1da-2d69-4ced-9803-7140e77000e7}w.sys (StdLib) (ea26b786ae08ac5d7ae3cc5461757eea)

1 / 68 (Adware)

{a4859c40-0b4e-48ca-81ae-fe6f139eaa49}w.sys (StdLib) (8675104722660341e6ee1ca67b0f9477)

1 / 68 (Adware)

plumoweb.purbrowse64.exe (59aa1d682dd41a0fa93743f32776bd2a)

1 / 68 (Adware)

plumoweb.dll (PlumoWeb) (17bc0b67b6d04baa73bef358efad9312)

1 / 68 (Adware)

maintainer.bak (029d6cd06c4f09cb5fbd991f94ad3d22)

1 / 68 (Adware)

{2e3800a8-eab3-4063-a79b-900fe3f11c5e}w.sys (StdLib) (f58cdcd2a7f61c000ce6bc314f49c84a)

1 / 68 (Adware)

{ebdcd3e8-ef7f-481f-b8c9-a955b9be3655}gt.sys (StdLib) (d5ec0936e65ca37c1305be2058f49947)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_9.dll (by TODO: <Company name>) (a7675448ce10f589c4549eded127d656)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_46.dll (by TODO: <Company name>) (7c668f32e37820e273532041ce43a2e7)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_45.dll (by TODO: <Company name>) (6cdc2c9e783bd472ecddf2f77de2551b)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_43.dll (by TODO: <Company name>) (7953fd3c715eab0c38f84e159229d60c)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_38.dll (by TODO: <Company name>) (e31938750a4ada42518bf67114aa56dd)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_37.dll (by TODO: <Company name>) (08f69678c9b67fc1c5d95edabe6ce6c0)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_36.dll (by TODO: <Company name>) (1f10f85aaf9511cdc89c3e7f32264e98)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_34.dll (by TODO: <Company name>) (3201927a1cf03704c53cd32f3ea1b40a)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_33.dll (by TODO: <Company name>) (6885de9b0e2a6ede9086a3c430cea295)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_32.dll (by TODO: <Company name>) (86248f11d9547bf6f8dac0e822291db5)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_31.dll (by TODO: <Company name>) (accc93f3940d92bb328d20715d1152e7)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_30.dll (by TODO: <Company name>) (9306cf943cc8f80b67459a8d84e7572b)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_29.dll (by TODO: <Company name>) (7364dfcf01f97817c8fd180d1a2be384)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_28.dll (by TODO: <Company name>) (0512a2a4a9e11399d6b08eccb29ebaf0)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_27.dll (by TODO: <Company name>) (b041149bdc8af43e7d83d38a7a2408c6)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_25.dll (by TODO: <Company name>) (e5c04a1d57882e9d743e4fd014d29615)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_24.dll (by TODO: <Company name>) (34ffde6e9bca4c92a36fbc44a484b9e0)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_23.dll (by TODO: <Company name>) (e971dec06cc02232034b02aa361def65)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_21.dll (by TODO: <Company name>) (ca600e5597a982ea671b1fee4dc766a4)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_20.dll (by TODO: <Company name>) (f02c4b0266b0dbcfb7083ac8e99c0240)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_2.dll (by TODO: <Company name>) (404504a8e254f7138624f57a1f1fb79d)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_17.dll (by TODO: <Company name>) (745d9526025644636d3b0dcde1f70e82)

1 / 68 (Adware)

2e3800a8eab34063a79b900fe3f11c5e_15.dll (by TODO: <Company name>) (07a232584512c28e8a2507900e692fa9)

Latest 30 of 5,661 files

The following publishers (by Authenticode signature organization name) are related.

30 of 149 publishers

* Note, the details and description above are based on the code signing digital signature issued to PlumoWeb by VeriSign, Inc. on August 04, 2014 with the serial number '792d14e276e932d00a4f272c4ed5b70e'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.