meivtaanat.exe

best apP

Part of the OutBrowse Revenyou installer which bundles offers for additional third party applications that may be unwanted and installed without consent. The application meivtaanat.exe by best apP has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
best apP  (signed and verified)

MD5:
464b4e6daa6219012cdd0db6c225a428

SHA-1:
107e29d797d7a62baa67542bf6ca2cdfe56381be

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
1/12/2025 9:36:36 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Outbrowse (M)
17.2.1.12

File size:
335.3 KB (343,312 bytes)

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Documents and Settings\{user}\Application data\adblocker\1.1.0.31\meivtaanat.exe

Digital Signature
Signed by:

Authority:
thawte, Inc.

Valid from:
3/16/2015 7:00:00 AM

Valid to:
12/18/2015 6:59:59 AM

Subject:
CN=best apP, O=best apP, L=Dublin, S=Dublin, C=IE

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
5AE07E692681C2D6576B013DAC28684A

File PE Metadata
Compilation timestamp:
5/15/2015 7:25:12 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x1CB04

Entry point:
E8, C6, 14, 01, 00, E9, 7F, FE, FF, FF, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 7F, 0F, B6, 44, 24, 08, 0F, BA, 25, 34, C7, 44, 00, 01, 73, 0D, 8B, 4C, 24, 0C, 57, 8B, 7C, 24, 08, F3, AA, EB, 5D, 8B, 54, 24, 0C, 81, FA, 80, 00, 00, 00, 7C, 0E, 0F, BA, 25, F0, A4, 44, 00, 01, 0F, 82, C3, 15, 01, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0, 10, 03, C1, 8B, CA, 83, E2, 03, C1, E9, 02, 74...
 
[+]

Entropy:
6.3431

Code size:
231 KB (236,544 bytes)

Remove meivtaanat.exe - Powered by Reason Core Security