best apP

Publisher Information

best apP is a software publisher located in Dublin, Ireland*. The company is a primary distributor of unwanted software. Thre are 19 additional code signing certificates issued to this publisher.
Authority:
thawte, Inc.

Valid from:
3/16/2015 7:00:00 AM

Valid to:
12/18/2015 6:59:59 AM

Subject:
CN=best apP, O=best apP, L=Dublin, S=Dublin, C=IE

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
5ae07e692681c2d6576b013dac28684a

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Outbrowse.bestapP, PUP.Outbrowse.Bundler, PUP.Outbrowse.bestapP (M), PUP.Outbrowse.bestapP.Bundler (M), PUP.Outbrowse (M)
100.00%

Dr.Web
Trojan.OutBrowse.576
33.33%

Baidu Antivirus
Adware.Win32.OutBrowse, Adware.Win32.PennyBee
33.33%

AVG
Generic, Generic6
33.33%

avast!
Malware-gen, Win32:Rootkit-gen [Rtk], Win32:Adware-gen [Adw], Win32:Malware-gen, Win64:Malware-gen
30.77%

ESET NOD32
Win32/Adware.PennyBee (variant), Win64/Adware.PennyBee (variant)
30.77%

Trend Micro House Call
Suspicious_GEN.F47V0508, Suspicious_GEN.F47V0514, Suspicious_GEN.F47V0517, Suspicious_GEN.F47V0518
23.08%

F-Secure
Application.Generic.1334984, Application.Generic.1344055, Gen:Variant.Mikey.13904
17.95%

Qihoo 360 Security
Win32/Trojan.ae7, HEUR/QVM10.1.Malware.Gen
15.38%

VIPRE Antivirus
Trojan.Win32.Generic
15.38%

1 / 68      (Adware)
meivtaanat.exe  (464b4e6daa6219012cdd0db6c225a428)

1 / 68      (Adware)
foaewno.exe  (67057c40fa55d5a92b39a426759ff705)

1 / 68      (Adware)
igiwik.exe  (34ac02e16913668700e900e26283e441)

1 / 68      (Adware)
biumiwikc64.exe  (0f305c5e9d42c64dcd66296ca9dd1a19)

1 / 68      (Adware)
biumiwikc.exe  (805781f987b78705dca6a100607a9896)

1 / 68      (Adware)
hyswgie.exe  (031d053d7d71205e2bb28844e1f05e56)

1 / 68      (Adware)
omhkwpoo.exe  (362323ceeb087ee4405b7e3331f71305)

1 / 68      (Adware)
nilfusre64.exe  (8d23edaf751bdaa239867048a97e491b)

1 / 68      (Adware)
nilfusre.exe  (5b7097ea7627584c136aed5498791fdc)

1 / 68      (Adware)
fihdidrua64.exe  (46c58835a7d3491853359ddb9f717996)

1 / 68      (Adware)
mayaef.exe  (ded609ecd2c574a7c4775cbcd1571e4c)

1 / 68      (Adware)
  (6d4e7cf65aebfc0e4f2fd05928d51d8d)

1 / 68      (Adware)
ylupwoc.exe  (d9d6c675aca84acfeb7548b3e48d280d)

1 / 68      (Adware)
ylupaoc.exe  (20b502f1551030260972b9ce1855186e)

1 / 68      (Adware)
redkuwbhjad.exe  (7bb94150f457fc86cf39fcd09ff31ea6)

1 / 68      (Adware)
fihdidrua.exe  (60e63110f7779997a11ca9ae7398e7af)

1 / 68      (Adware)
yyibyzkoqh64.exe  (37f98cd1262e8e8109b9c2afdfd7f25d)

1 / 68      (Adware)
yyibyzkoqh.exe  (d0e1d1ca6e3c5e60520db8a99a1a06ac)

1 / 68      (Adware)
xisuluj64.exe  (fd3178125b6b00b97a1c0e3a896fe2b8)

1 / 68      (Adware)
xisuluj.exe  (072cbf68d9017a8d1cf97c4edaf6aeb3)

1 / 68      (Adware)
kygwbe.exe  (f19c0696a88e29cfb48de9d146ed35dc)

1 / 68      (Adware)
trzfe4c.tmp  (f755dba952207bd2e7aaff2b7dae7e82)

1 / 68      (Adware)
trzb598.tmp  (06956a462060593cd44d519dd31f4c0b)

1 / 68      (Adware)
trz5e3f.tmp  (9afae6baf458f8d729bf59f60bb30130)

1 / 68      (Adware)
omhkapoo.exe  (0d97e6308891d376974164ab7efb93ff)

1 / 68      (Adware)
cuerweru.exe  (4384e018f9cd97a5f81232d363fb4a9c)

7 / 68      (Adware)
00000000-f7c74019.av$  (8ff8d471e6954bc0ac435b4378b7f2dc)

9 / 68      (Adware)
feapwet64.exe  (ec27ae0fd1557cddf1186d2a146f2563)

11 / 68    (Adware)
feapwet.exe  (7271a6bdc1bb13d0f88bb9e3e120249c)

10 / 68    (Adware)
nypdagrimei64.exe  (d5ec73c3a189bab291a896a5262f73ac)

 
Latest 30 of 39 files

The certificates below are also signed by best apP.

664D723AAEE4E45D91E9AE07011D86E1  (Dec 14, 2015 to Dec 17, 2016)

753268A74C6FF163A7FFD24BAD583CCB  (Jan 25, 2015 to Dec 18, 2015)

0E00C72544927098052AA7DF30906DCB  (Feb 01, 2015 to Dec 18, 2015)

65D9D19C7EA688045DD29A19B72499E3  (Mar 10, 2015 to Dec 18, 2015)

0CE91F0B5E46F8AC407C1289EBDCCF90  (Jan 11, 2015 to Dec 18, 2015)

30BCCA0188EBA5E04F507F7E5C0B999C  (Dec 17, 2014 to Dec 18, 2015)

494DB00BAD332F5531355D1EBFBCBC2D  (Jan 14, 2015 to Dec 18, 2015)

561F7A28F0603E5A446627646F1156B8  (Jan 17, 2015 to Dec 18, 2015)

64E1250DF629BD3901AA90A77D70239E  (Jun 30, 2015 to Dec 18, 2015)

6A88EF866C22387C2B46530FC448B4B9  (Jun 10, 2015 to Dec 17, 2015)

10 of 19 code signing certificates issued

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to best apP by thawte, Inc. on March 16, 2015 with the serial number '5ae07e692681c2d6576b013dac28684a'.