» BEST App
Digital Signature
Analysis
Files (28)
Downloads (8)
Distribution (7)
Related (18)

BEST App

Publisher Information

BEST App is a software publisher located in Dublin, Ireland*. The company is a primary distributor of unwanted software. Thre are 19 additional code signing certificates issued to this publisher.

Authority:

thawte, Inc.

Valid from:

1/14/2015 2:00:00 AM

Valid to:

12/18/2015 1:59:59 AM

Subject:

CN=BEST App, O=BEST App, L=Dublin, S=Dublin, C=IE

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

494db00bad332f5531355d1ebfbcbc2d

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.BESTApp, PUP.Installer.BESTApp, PUP.Outbrowse, PUP.Outbrowse.BESTApp.Bundler (M), PUP.Outbrowse (M)

100.00%

Dr.Web

infected with Trojan.OutBrowse.65

21.43%

F-Secure

Riskware.MemScan:Application.Bundler.JU

21.43%

ESET NOD32

Win32/OutBrowse.BS potentially unwanted application

21.43%

Kaspersky

not-a-virus:Downloader.NSIS.OutBrowse

21.43%

MicroWorld eScan

MemScan:Application.Bundler.JU

21.43%

McAfee

Artemis!591DF37B3C00, Adware-OutBrowse.e

21.43%

Malwarebytes

PUP.Optional.OutBrowse

21.43%

K7 AntiVirus

Trojan

21.43%

Trend Micro House Call

Suspici.AF8C44A8, TROJ_GE.8D700EFD

21.43%

1 / 68 (Adware)

free mkv player - vlc media player.exe (db10f5b1a4244936a830c4232e5460b1)

1 / 68 (Adware)

uh hack v1.1.7.exe (5b62dd2a1a0ed9ed6aaa546c83c4f072)

1 / 68 (Adware)

minecraft para pc full espanol.exe (480c0b23abf4e78c876941f7df013926)

1 / 68 (Adware)

s2sonsilahprocexpilegalkasmaprogram.exe (b38a25f2a1295dceb215ccb52b285b93)

1 / 68 (Adware)

s2sonsilah16092013viphac.exe (26e27862ea94c2d34f1149ce00e7b914)

1 / 68 (Adware)

java_runtime_enviroment_setup.exe.exe (20653125f001913ce59b1d8271fc105b)

1 / 68 (Adware)

non confirmé 511300.crdownload (9e5c3031f6df5749989eced84935656d)

1 / 68 (Adware)

java_runtime_enviroment_setup.exe.exe (9c64e3080dd6a10eca11eefe365c5a7e)

1 / 68 (Adware)

installation.exe (e95901fb957fc74a50aed631348f7883)

1 / 68 (Adware)

installation.exe (456b1bf1746564d62121a56825ca02ea)

1 / 68 (Adware)

bbgcabfebbbj.exe (a0ca1682799122cdbd3d55780799c93c)

1 / 68 (Adware)

windows7 loader activator.exe (9f699492a76b9e0a44dff32956f185d9)

1 / 68 (Adware)

java_runtime_enviroment_setup.exe.exe (97e728bcb785a02f9a0245155b91d51f)

1 / 68 (Adware)

java_runtime_enviroment_setup.exe.exe (da43a64c49663dfe984b8e47db029fed)

1 / 68 (Adware)

java_runtime_enviroment_setup.exe.exe (43f7c4815f3d38e7c2f5264cf5b22380)

1 / 68 (Adware)

java_runtime_enviroment_setup.exe.exe (a369975d948fbe802c3c5df9ff3b050b)

1 / 68 (Adware)

java_runtime_enviroment_setup.exe.exe (a952d6475ffe69902148534d1832e9d0)

1 / 68 (Adware)

java_runtime_enviroment_setup.exe.exe (a39650d8f84c7aec43560b6d791f1c32)

1 / 68 (Adware)

installation.exe (ae830cbf4bd56a0cf2c29a1220994284)

1 / 68 (Adware)

ashampoowinoptimizer11turkc.exe (1e11d495feb506425b7f62773ac582ef)

12 / 68 (Adware)

ashampoowinoptimizer11turkc.exe (3d8285a074c8490f8750e0b396cc3c3c)

12 / 68 (Adware)

ashampoowinoptimizer11turkc.exe (fcbaf4280348abaed18a29c6224a9140)

24 / 68 (Adware)

kmspico_10.0.3.exe (f4c45fa8dca640a1d92216c0eaf01e46)

1 / 68 (Adware)

weather watcher live 7.2.42_2.exe (b03f112f9a20c8d36e797001d680ebfa)

16 / 68 (Adware)

setup.exe (145f8ab32c0cee5765b1bf92d03a4612)

16 / 68 (Adware)

installation.exe (1d3e73e8780f25d3b09d8861b460709c)

16 / 68 (Adware)

spybot.exe (c9df0eba56624b2489d1162bfb023ffb)

1 / 68 (Adware)

wolfteamturkiyeveaeriamultigol.exe (27a49cf96f7e8bebeae5ce25444c3d71)

Downloads URLs for files signed by BEST App.

1 / 68 (Adware)

http://get.file20desktop.com/.../Get?p=2266&d=23081&l=22275&n=1&filename=UH Hack V1.1.7 (uh hack v1.1.7.exe)

1 / 68 (Adware)

http://soft24.checkernow.com/dl.php?conversion_id=14214201431120&site_id=1702&app_id=63&lp_id=335&v=obn&stub_id=68&v_id=2e074e54b8879603576bf271a064fb0a&dist_id=292&channel=affl292&subid=102620_9a75e276e1846451757c1ac1446dbf64 (java_runtime_enviroment_setup.exe.exe)

1 / 68 (Adware)

http://get.file11desktop.com/.../Get?p=11324&d=18947&l=18103&n=1&productname=winrar&s=fr (installation.exe)

1 / 68 (Adware)

http://soft24.check-live.com/dl.php?conversion_id=14214233920625&site_id=1718&app_id=63&lp_id=335&v=obn&stub_id=68&v_id=a68071e476fcba7caceccafd772d2fa6&dist_id=292&channel=affl292&subid=102620_fcdf5201a4c6548eb4a12cc094098073 (java_runtime_enviroment_setup.exe.exe)

24 / 68 (Adware)

http://get.file26desktop.com/downloadmanager/get?p=4363&d=25522&l=24711&n=1&productname=Setup&dynamicname=KMSPico 10.0.3&filename=KMSPico_10.0.3&tyurl=http://ppvline.com/.../Windows8.html&S=kmspico (kmspico_10.0.3.exe)

16 / 68 (Adware)

http://7769domain.com/Ad/GoP/13518/www.shouldiremoveit.com/186491/.../download/www.shouldiremoveit.com/.../US/.../ (setup.exe)

16 / 68 (Adware)

http://get.file3desktop.com/.../Get?p=7392&d=10083&l=9525&n=1&dt=1413727118 (installation.exe)

1 / 68 (Adware)

http://get.file15desktop.com/.../Get?p=18474&d=24744&l=23929&n=1&dynamicname=Setup&filename=wolfteamturkiyeveaeriamultigol (wolfteamturkiyeveaeriamultigol.exe)

Distribution

The following websites host and distribute files published by BEST App.

soft24.checkernow.com

soft24.check-live.com

get.file11desktop.com

get.file26desktop.com

7769domain.com

get.file3desktop.com

get.file15desktop.com

The certificates below are also signed by BEST App.

664D723AAEE4E45D91E9AE07011D86E1 (Dec 14, 2015 to Dec 17, 2016)

5AE07E692681C2D6576B013DAC28684A (Mar 16, 2015 to Dec 18, 2015)

753268A74C6FF163A7FFD24BAD583CCB (Jan 25, 2015 to Dec 18, 2015)

0E00C72544927098052AA7DF30906DCB (Feb 01, 2015 to Dec 18, 2015)

65D9D19C7EA688045DD29A19B72499E3 (Mar 10, 2015 to Dec 18, 2015)

0CE91F0B5E46F8AC407C1289EBDCCF90 (Jan 11, 2015 to Dec 18, 2015)

30BCCA0188EBA5E04F507F7E5C0B999C (Dec 17, 2014 to Dec 18, 2015)

561F7A28F0603E5A446627646F1156B8 (Jan 17, 2015 to Dec 18, 2015)

64E1250DF629BD3901AA90A77D70239E (Jun 30, 2015 to Dec 18, 2015)

6A88EF866C22387C2B46530FC448B4B9 (Jun 10, 2015 to Dec 17, 2015)

10 of 19 code signing certificates issued

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to BEST App by thawte, Inc. on January 14, 2015 with the serial number '494db00bad332f5531355d1ebfbcbc2d'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.