home

spark_install.exe

Spark

Baidu Online Network Technology (Beijing) Co.,Ltd.

This is a self-extracting archive and installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Baidu Online Network Technology (Beijing) Co.,Ltd.  (signed and verified)

Product:
Spark

Description:
Baidu Browser

Version:
40.16.1000.126

MD5:
cf202a0612befb51c00710eabb6f7225

SHA-1:
5828cd8b5f78354dee720aefe06b67e07c205cde

SHA-256:
b86985e3200844b1519c600b7cec1909fd9f9ed3b4f4111d27ed7b02c44a3ef1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 7:53:35 AM UTC  (today)

File size:
50.4 MB (52,799,152 bytes)

Product version:
40.16.1000.126

Copyright:
Copyright (c) Baidu Inc.

Original file name:
SparkSetup.exe

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, PRC)

Common path:
C:\users\{user}\appdata\local\temp\spark_install.exe

Digital Signature
Signed by:
Baidu Online Network Technology (Beijing) Co.,Ltd.

Authority:
VeriSign, Inc.

Valid from:
3/24/2015 5:00:00 PM

Valid to:
3/25/2016 4:59:59 PM

Subject:
CN="Baidu Online Network Technology (Beijing) Co.,Ltd.", OU=Baidu security, O="Baidu Online Network Technology (Beijing) Co.,Ltd.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5FAEE9E83F32948F3B2040AC6DF0145C

File PE Metadata
Compilation timestamp:
12/18/2013 11:14:07 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
786432:al3IKjLu48uuknbULw0DbNR3pdvgp5QoF/9wxIMLWSMdJBF3HfiCfIr/2vVhDyN:yPmklK73pdgp5h9wgJNbfIT2vTON

Entry address:
0x5A707

Entry point:
E8, A4, 81, 00, 00, E9, 89, FE, FF, FF, 6A, 00, FF, 15, 7C, 2B, 78, 00, C3, FF, 15, 68, 2B, 78, 00, C2, 04, 00, 8B, FF, 55, 8B, EC, FF, 75, 08, FF, 35, 30, 6C, 4A, 00, FF, 15, 64, 2B, 78, 00, FF, D0, 5D, C2, 04, 00, A1, 2C, 6C, 4A, 00, C3, 8B, FF, 56, FF, 35, 30, 6C, 4A, 00, FF, 15, 64, 2B, 78, 00, 8B, F0, 85, F6, 75, 1B, FF, 35, BC, 77, 76, 00, FF, 15, 80, 2B, 78, 00, 8B, F0, 56, FF, 35, 30, 6C, 4A, 00, FF, 15, 60, 2B, 78, 00, 8B, C6, 5E, C3, 8B, FF, 55, 8B, EC, FF, 75, 0C, FF, 75, 08, FF, 35, C0, 77, 76...
 
[+]

Entropy:
7.9977  (probably packed)

Code size:
550.5 KB (563,712 bytes)

The file spark_install.exe has been seen being distributed by the following 32 URLs.

https://dw.uptodown.com/dwn/LwQQe_lVoEC4cgeSde_DY62-q5RTIF6e-_rTVxabKaIm7mmxqB808V752tS5-onoq2TjX-ct4Rh1bbogCCP19162TO1mGeNiKXQI7JIRuYVjMUAziHVpbwXjsfku_2zR/npvrKReSEMBgrJeZylMucyEOB5iuudvITgJjqPxL555JRlkISL0eV91Rdl3YTub-iR9QvISd-myh-fZSY2zIkdVnNUMQPEj-l1WTHHqnzZfZXDYYpY1bj9iRr8mtAR8a/b4jRX7JHmkX-RMIWGB6giiFsV8nGfoZ2U0ycWpvtVaA4J1oouzB2qcgbq9nGktV7FAMlkBOuKNQqblKUfOvOyO-1GHX4QPrGHcA9lld6QCmOGpTsNOwOK_bwIlujmVn4/.../

https://docs.google.com/uc?export=download&confirm=mbKW&id=0Bz12HtjL1N9YeXpIZGd2RUpFZ28

http://dw.ar.uptodown.com/dl/1435448971/.../baidu-spark-browser-40-16-1000-126-multi-win.exe

temp:Spark_Setup_all.exe

https://dw.uptodown.com/dwn/fABOMha-tx46JbshQlNzkZeqaHrrIBy6P2pPfomBkqHQFd2WoePj6DX43ml4iFOfd1rrjHZ3Z1gvFiv7WoHNRKe5IM8PgPYfv3wTX8mstPVyeM4l95mdc697rJTyJKbE/gQ1kJNSPWt0-7RVZfzzTFRqtNXsMQK2E_gD5voluiQsLZxSFGXc3NznsxDmh_nEHgChQYYXeXqA2ErW26pce_obHRBCJkSDs2piCGLq9mDRWi7luZBk9nJgV7N-bMLY8/UcqIhWxMDlVDSrlaXsLME36O80ArH6wLamTlhAVSfrntavT1NU7IIOaYEyt28KFndLo_QvMaROmBna9iDaxu2weOnpoDrQIJIJF6Q0iJ_KNXfwSut7cHhIWdnOwoujTa/.../

https://docs.google.com/uc?export=download&confirm=LPg9&id=0Bz12HtjL1N9YeXpIZGd2RUpFZ28

http://dw.ar.uptodown.com/dl/1431820269/.../baidu-spark-browser-40-16-1000-126-multi-win.exe

http://dw2.ar.uptodown.com/dw/1435862037/.../baidu-spark-browser-40-16-1000-126-multi-win.exe

http://dw.ar.uptodown.com/dl/1439672732/.../baidu-spark-browser-40-16-1000-126-multi-win.exe

http://share2.earthlinktele.com/download.aspx?file=672495994

https://dw.uptodown.com/dwn/Z5Pa_dHUv7vT8usBKqbuQUFtg0ocaokXPso-lGC_MLRAEKlQKjum3xlMl1zAVDqysi-Ni3rs5VZrLs9hXjPZmxhTq_6uIJjTNsv15kKkaP6dl1PIr_7d5bgZPa4Jo_6J/qzbDMAS3SEF2KAAjjg7imo97v3wlgroKQw4iH_iljpb2ph0uPKXObAEBJSnDQ6MSHvENT-dT_2Dier6AbmXyq1D-JG8c8D2s08Iaj1mserGy_3IoevMHs5v6fQLtxRli/5MPb5B41hLB44Wlt2qMTPCjexMdwSn8-VxtHiNZnDbDIb6CGbNU9Ge0Ebkb0tBwLmJtutFmD_mke8I_Sk4XMSglxeyNXG4KKFgbavdjGwkpOdd6kAeAXrWsQldBzkZBS/.../

http://store.jazeeratelecom.net:8080/index.php?do=download&id=97679

http://dw.ar.uptodown.com/dl/1439454433/.../baidu-spark-browser-40-16-1000-126-multi-win.exe

http://dw.ar.uptodown.com/dl/1432990682/.../baidu-spark-browser-40-16-1000-126-multi-win.exe

http://www.filehorse.com/download/file/.../

http://dw.ar.uptodown.com/dl/1433693586/.../baidu-spark-browser-40-16-1000-126-multi-win.exe

http://dw.ar.uptodown.com/dl/1438623623/.../baidu-spark-browser-40-16-1000-126-multi-win.exe

https://dw.uptodown.com/dwn/bw4J91O1IAQXhZEZ6_XYD6kBJUgAOSt3x9mUxKfI8MS3O_0l-5J6iXZhovJphMla70P_Im2oWCuAgc_QQJUl1hHuEQNngafd-rQ1RHfLO0IVRbEA-l5nJRivMY1TZTcX/MQrfPw3jt4EORxtm0ZSWqrg7V2GDqEbHAciNtCXHICvr3_QOAybAuHSTRDnNFO75tBGAbKMlQdGENf8KLJdk7lbVM1V3i4iWH-3yYeqldTH5OTdEw072e9kchnFAakHH/Xfc71-VRhjuxaBB_VRrJNNl2CU_FoaHEBzb5T4vH2o7yaxP6EQ-5yQ4ZrtJ-nhgkBum596o-UAjX4H2-ljBNKiVvo79qwWR3uCX3I386A_px7aMUuHYzPxvVQXxnaA6X/.../

http://dw.ar.uptodown.com/dl/1436048325/.../baidu-spark-browser-40-16-1000-126-multi-win.exe

http://cdn.whitepackagescentre.com/c?x=EquRod3FfA/YtPW6Z4P98EdnSwhA6SqKMCTVq1wStwg=&c=hJJfpKll2ZBvNiKz2sZzvgNZrhxj22BKGJvr7l2VQTUy3jTceobRy0L1aDRaR0PM4om8eY6ziEM C1H2k/eOEA==&fallback_url=http://dl-vip.browser.baidu.com/.../Spark_Setup_all.exe

http://dw.ar.uptodown.com/dl/1438180734/.../baidu-spark-browser-40-16-1000-126-multi-win.exe

http://dw.ar.uptodown.com/dl/1432709012/.../baidu-spark-browser-40-16-1000-126-multi-win.exe

http://en.browser.baidu.com/.../fullpackage.exe

http://dw.ar.uptodown.com/dl/1434658068/.../baidu-spark-browser-40-16-1000-126-multi-win.exe

http://dl-vip.browser.baidu.com/.../Spark_Setup_all.exe

http://dl.cdn.chip.de/downloads/.../Spark_Setup_all-40.16.exe

http://dw.ar.uptodown.com/dl/1433358156/.../baidu-spark-browser-40-16-1000-126-multi-win.exe

http://dw.uptodown.com/dwn/qeG_2wcY4NdA2ZszI0HRUq3EanSe8w-i8JIJ_tw6XLJ3zilPw-XN0MAA5ZPH7voTa5yFTyX4JC-2CXQrk_w7ZCA76-YuiDs8HX6_kKrVNm-uWzZQ3yq9JxsMmI7byU9e/99Jul_8y9dOhVhg518VmJzdmfa8sgwymRVq01S-6ArjVopwQjdJxly3U-wwweC_LeZLBBC07ZuNCeyImf9VQoBbweIRzot--nyTrJqCRZJ5s8Ds9IJ4ghhnKbXRwCsXo/T3zwPRcJHAO67pEqVrVB86nXnRL-CLorbXJ2vkptDaVZ6hmDNZDU1PBmzlP9dn9xZSzOkpTgtUSulaksydmfFrSxEuXm4nQC7M_tgwNFyH7iHU4sxf_vg1QMwbHFfLEJ/.../

temp:baidu-spark-browser-40-16-1000-126-multi-win.exe

http://br.browser.baidu.com/.../fullpackage.exe

Latest 30 of 32 download URLs

Scan spark_install.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.