» browser_v5.7.16173.12_r_4722_(build1610201330).exe.td
Overview
Analysis
File Details

browser_v5.7.16173.12_r_4722_(build1610201330).exe.td

UC浏览器

NetLock Halozatbiztonsagi Kft.

File name:

Publisher:

UCWeb Inc. (signed by NetLock Halozatbiztonsagi Kft.)

Product:

UC浏览器

Version:

5.7.16173.12

MD5:

793716ea376efecd7ce3416eb6b66ddb

SHA-1:

64cf3d7adb6b5ca70ee75a564e1b0dbe74cedd30

SHA-256:

0799b5865fec61d4cff37e01a5be2051d57e7cec2c3a1c3f55964f0d446ccdb6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 11:56:39 AM UTC (today)

File size:

50.6 MB (53,071,872 bytes)

Product version:

5.7.16173.12

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\browser_v5.7.16173.12_r_4722_(build1610201330).exe.td

Digital Signature

Signed by:

NetLock Halozatbiztonsagi Kft.

Authority:

NetLock Halozatbiztonsagi Kft.

Valid from:

2/25/1999 4:14:47 AM

Valid to:

2/20/2019 4:14:47 AM

Subject:

CN=NetLock Kozjegyzoi (Class A) Tanusitvanykiado, OU=Tanusitvanykiadok, O=NetLock Halozatbiztonsagi Kft., L=Budapest, S=Hungary, C=HU

Issuer:

CN=NetLock Kozjegyzoi (Class A) Tanusitvanykiado, OU=Tanusitvanykiadok, O=NetLock Halozatbiztonsagi Kft., L=Budapest, S=Hungary, C=HU

Serial number:

0103

File PE Metadata

Compilation timestamp:

10/19/2016 6:19:34 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

14.0

CTPH (ssdeep):

393216:vLU8+Ej/qKeBrsMRTzMdxse331YSBT73PJ9dlZkb0g9XvwtPgW9z:oXEjyKAsMNMbsu31F73P+bLtIFgqz

Entry address:

0xA72B2

Entry point:

E8, A6, 08, 00, 00, E9, 80, FE, FF, FF, 3B, 0D, 24, F4, 4C, 00, F2, 75, 02, F2, C3, F2, E9, 28, 00, 00, 00, 55, 8B, EC, 6A, 00, FF, 15, 88, 61, 4D, 00, FF, 75, 08, FF, 15, B8, 60, 4D, 00, 68, 09, 04, 00, C0, FF, 15, D8, 62, 4D, 00, 50, FF, 15, 40, 62, 4D, 00, 5D, C3, 55, 8B, EC, 81, EC, 24, 03, 00, 00, 6A, 17, E8, E1, 55, 02, 00, 85, C0, 74, 05, 6A, 02, 59, CD, 29, A3, E0, 35, 4D, 00, 89, 0D, DC, 35, 4D, 00, 89, 15, D8, 35, 4D, 00, 89, 1D, D4, 35, 4D, 00, 89, 35, D0, 35, 4D, 00, 89, 3D, CC, 35, 4D, 00, 66... 
[+]

Entropy:

7.2194

Code size:

823.5 KB (843,264 bytes)

Scan browser_v5.7.16173.12_r_4722_(build1610201330).exe.td - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.