» ResultsShare
Digital Signature
Analysis
Files (3,734)
Related (87)

ResultsShare

Publisher Information

ResultsShare is a brand of the Sambreel/Yontoo group, a web advertising company located in Carlsbad, CA. The company is a primary distributor of unwanted software. It is part of the Yontoo/Sambreel group and distributes web browser add-ons, typically potentially unwanted and adware in nature, that are designed to modify a user's typical search beahvior as well as display context and popup advertising.

Authority:

VeriSign, Inc.

Valid from:

11/4/2014 10:00:00 PM

Valid to:

11/5/2015 9:59:59 PM

Subject:

CN=ResultsShare, O=ResultsShare, L=San Diego, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

461d00bb4b899d87dd5da9b7e2eb2831

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Yontoo (M), Adware.Yontoo (M)

100.00%

1 / 68 (Adware)

frameddisplaybho.dll (Framed Display) (1bfb3b204a2e32aff741d8510c7557d6)

1 / 68 (Adware)

FramedDisplay.Repmon.dll (b9f684209a660c9b8a6607528c3923a4)

1 / 68 (Adware)

frameddisplay.purbrowse.exe (7849fb8b4067866ff54890fd02a9e3a7)

1 / 68 (Adware)

frameddisplay.purbrowseg.dll (2bf2800330f7998c655d1dd62a04baec)

1 / 68 (Adware)

frameddisplay.purbrowseg.dll (c9b2b3465ad3bec923f4abfb72c471e7)

1 / 68 (Adware)

frameddisplay.expext.dll (e8a39ea29b3e7c425dec7c264b9a53f0)

1 / 68 (Adware)

frameddisplay.purbrowse64.exe (7d6cb6a97e8400a22d3a452724b18360)

1 / 68 (Adware)

frameddisplay.browseradapter.exe (3addd02eb292b3f5f5950902e52d3722)

1 / 68 (Adware)

cd63c300b2314a93a4795a1e96976d7464.dll (by TODO: <Company name>) (1e3cd66a3bf845629e4ae9e28a03d3a3)

1 / 68 (Adware)

cd63c300b2314a93a4795a1e96976d74.dll (by TODO: <Company name>) (e4ffa5dbc82a072ffa922024c7d6b646)

1 / 68 (Adware)

frameddisplay.expextdll.dll (ad2108248b43c2e84ea4ee8b1523afbf)

1 / 68 (Adware)

{cd63c300-b231-4a93-a479-5a1e96976d74}gw.sys (StdLib) (bf1e43eef098249062419f1a5a64e537)

1 / 68 (Adware)

frameddisplay.purbrowse.dll (ed7a193c1030807076e054d57bdaa83f)

1 / 68 (Adware)

frameddisplay.expextdll.dll (e228cc4c744670d9a08d7de65b9eb3de)

1 / 68 (Adware)

frameddisplay.expext.exe (da1f76d49aad5b1b00f6f1d2082a5e3d)

1 / 68 (Adware)

{cd63c300-b231-4a93-a479-5a1e96976d74}gw.sys (StdLib) (9e4c79d849de71ea51c8ad3c98962bc2)

1 / 68 (Adware)

{cd63c300-b231-4a93-a479-5a1e96976d74}gw.sys (StdLib) (b5988741c861949cade41809102897ce)

1 / 68 (Adware)

frameddisplay.purbrowse64.exe (8ccbf23c9b254ac104b7341dce97a722)

1 / 68 (Adware)

{cd63c300-b231-4a93-a479-5a1e96976d74}gw.sys (StdLib) (4b67d42f7b2391047b686ce8329a229f)

1 / 68 (Adware)

maintainer.exe (2ed63f62911fb77609e89e9da62e286c)

1 / 68 (Adware)

maintainer.bak (e8bf00fc79c3e98b2bab9608c1732122)

1 / 68 (Adware)

frameddisplay.purbrowse.dll (e28f1a5a7b0c2c44c3d4597cdeb45abc)

1 / 68 (Adware)

{cd63c300-b231-4a93-a479-5a1e96976d74}gw.sys (StdLib) (5fe45ea8b9e2cae2503e13863b23f4dd)

1 / 68 (Adware)

{cd63c300-b231-4a93-a479-5a1e96976d74}gt.sys (StdLib) (6d17290a81a6102576082c0c37f9273c)

1 / 68 (Adware)

{cd63c300-b231-4a93-a479-5a1e96976d74}gt.sys (StdLib) (52d4273738bcb0686746d683ff404504)

1 / 68 (Adware)

frameddisplay.purbrowse.exe (479804b091d080a29f4ca3f65e1fd487)

1 / 68 (Adware)

maintainer.exe (89d42a6367433fb4c787941c32e6dae7)

1 / 68 (Adware)

frameddisplay.purbrowse64.exe (1f5342eafabd1076386f0f9acafd5a38)

1 / 68 (Adware)

frameddisplay.expext.dll (3b6ce30599684d43d2f518f98bc70516)

1 / 68 (Adware)

{cd63c300-b231-4a93-a479-5a1e96976d74}gw64.sys (StdLib) (b7899af4895b16159dbc7f6cb49b4c35)

Latest 30 of 3,734 files

The following publishers (by Authenticode signature organization name) are related.

30 of 87 publishers

* Note, the details and description above are based on the code signing digital signature issued to ResultsShare by VeriSign, Inc. on November 04, 2014 with the serial number '461d00bb4b899d87dd5da9b7e2eb2831'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.