home

spark_install.exe

Spark

Baidu Online Network Technology (Beijing) Co.,Ltd.

This is a setup and installation application. The file has been seen being downloaded from filehippo.com and multiple other hosts.
Publisher:
Baidu Online Network Technology (Beijing) Co.,Ltd.  (signed and verified)

Product:
Spark

Description:
Baidu Browser

Version:
43.22.1000.452

MD5:
4ae62cdfd4a6acfa086915a395ccbb8a

SHA-1:
a1fad02dc0097f386db9d772ce7c456925ed9385

SHA-256:
2fafc5908eafe79b16fa82c55f4b624650d446b499787b6a305ca3ef14f8597c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 3:16:26 PM UTC  (today)

File size:
46.2 MB (48,392,688 bytes)

Product version:
43.22.1000.452

Copyright:
Copyright (c) Baidu Inc.

Original file name:
SparkSetup.exe

File type:
Executable application (Win32 EXE)

Language:
Chinese

Common path:
C:\users\{user}\appdata\local\temp\spark_install.exe

Digital Signature
Signed by:
Baidu Online Network Technology (Beijing) Co.,Ltd.

Authority:
VeriSign, Inc.

Valid from:
3/25/2015 1:00:00 AM

Valid to:
3/26/2016 12:59:59 AM

Subject:
CN="Baidu Online Network Technology (Beijing) Co.,Ltd.", OU=Baidu security, O="Baidu Online Network Technology (Beijing) Co.,Ltd.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5FAEE9E83F32948F3B2040AC6DF0145C

File PE Metadata
Compilation timestamp:
12/19/2013 8:14:07 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
786432:gDT/bYwce8HiU8YbnMZliJsi9c3S9QaQNtbqBCkLUyOODBASaSEK/e5x5hPwIq:KLbYw8CU8snMYx9cS9QzNtqBChyx9AS5

Entry address:
0x5A707

Entry point:
E8, A4, 81, 00, 00, E9, 89, FE, FF, FF, 6A, 00, FF, 15, 7C, 2B, 78, 00, C3, FF, 15, 68, 2B, 78, 00, C2, 04, 00, 8B, FF, 55, 8B, EC, FF, 75, 08, FF, 35, 30, 6C, 4A, 00, FF, 15, 64, 2B, 78, 00, FF, D0, 5D, C2, 04, 00, A1, 2C, 6C, 4A, 00, C3, 8B, FF, 56, FF, 35, 30, 6C, 4A, 00, FF, 15, 64, 2B, 78, 00, 8B, F0, 85, F6, 75, 1B, FF, 35, BC, 77, 76, 00, FF, 15, 80, 2B, 78, 00, 8B, F0, 56, FF, 35, 30, 6C, 4A, 00, FF, 15, 60, 2B, 78, 00, 8B, C6, 5E, C3, 8B, FF, 55, 8B, EC, FF, 75, 0C, FF, 75, 08, FF, 35, C0, 77, 76...
 
[+]

Code size:
550.5 KB (563,712 bytes)

The file spark_install.exe has been seen being distributed by the following 50 URLs.

http://filehippo.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/a07542178d815f543c2dc89b0e9681ac/56b8d0c4/soft/.../baidu-spark-browser_43-22_en_431171.exe

http://www.grabupdateshare.com/O_A_u2CuVg2XfpU6mwRtHa6yGnpED9yyDDnIs1EwGf9jDIo IoaT HxQDfKSe_szyrPJmZP3z8jmi 4dsdg3a 7u Q9OG22IhmflZaAjJiFzIceBtg1RqXmCFtPYtSl2EPn23sgbEA3lNsArSnPClC7dfwI8X8NqOcWqXMIyseNeUBYkT3DHtaTylTtqBfZcCN_GDO2pmJW61t6S0_dAG9RrvCzU5uKHmZlZxnlzeYkWhO6s_nBePoDMEZaKzHu 2_mLhvboVtRcQ aKjGvQmAhWsKR4rSa G BUXF02ZpLF2W7 u7cq3puCDsgvnmyO8YEcOOoFni8PnNHKN59oXcUbghHkrUB1bF scWHFlBP8BbfJTS96QWJ1wSVSvHaErS9pQxEOPsC4SVpqqVQw8Tw75LzpqOzibNMjK6iWEFYoSmCWnpPd0A6gG33nI4zRF5ZkQHytXOoovzap5NAlL9KnkoMgqfjrCWZYBy_CG6W_70e8EZw3P1Hccs6LMocBz95_ PI3sRIuKDW8IB90DoAmjiygnyJDxjGnZuHC_RCPAqoZvPudM0Mc73ecYfl2DsEB m3CQd AKB8EzXjiQscmB71y2yZfxlCAV9edL1W9Ar2IjvG e81bD d0Tur0oFm8ciOGh2XxubY5ot3xxN8TZgIpBpm24_bU1lj1MXbGH3eywlfH jzYtLRlyji6CszsADn-Gz0AAORtm0_ToNaQL4GOyhFkEEzkwKEFctEDWbl5oDdGNFh9P d 15RmjlS4I1WmhqIJFc93dESAfwc=-e

http://www.filehorse.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/00f690854125faa052fd6160bfeccb6a/56b8f12d/soft/.../baidu-spark-browser_43-22_en_431171.exe

http://goo.gl/Yr7YX5

http://filehippo.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/7f6c02b73a5c62eaa27507efd6bcea4b/56b7980e/soft/.../baidu-spark-browser_43-22_en_431171.exe

http://filehippo.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/af93098adf7f1bfb5bdede1ff58db03e/56d5c8c6/soft/.../baidu-spark-browser_43-22_en_431171.exe

http://183.91.33.52/dlsw.baidu.com/sw-search-sp/soft/ca/.../Spark_Setup_all_43.22.1000.452.1454312344.exe

http://lb.cdn.m6web.fr/d/c/a/b89c381fb2462a03c71c0d3f5d0fed77/5694d378/soft/.../baidu-spark-browser_43-22_en_431171.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.filepuma.com/file/1455217591c10529/baidu_browser_43.22.1000.452/.../0/

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/329aabc3eec49d49435229c1ae20ee89/56d9e2b2/soft/.../baidu-spark-browser_43-22_en_431171.exe

http://filehippo.com/download/file/.../

http://w.x.baidu.com/alading/.../29703

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://share2.earthlinktele.com/download.aspx?file=302230643&sig=MjcvMTAvMjAxNiAxODo0ODo0Mg==

http://www.filehorse.com/download/file/.../

http://filehippo.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/1072496335fa94ac9dbc4190f2cd23a8/56bb817a/soft/.../baidu-spark-browser_43-22_en_431171.exe

http://www.grabupdateshare.com/ eZMgGLPAsGWFIu395QS3ETpGQAJG13S92N9Uly6d56L1GYCZazWUiFbIDhiT1_vZuXuoGdGqpTFHOo_DFgrUsjd2cjegbFzt_BeiupT92GoMJS9ODejokiDZfOdzkU9ablwWAEUbeyrwOpCbM4gHRZlbqdQCOVKP3 J_3ccKO T1vOlNJnRDGXdGqHlLzGjsHmci2pEuSkKc6hK15Jr JbkMdfIRikLIXvgFE0RcD9Dse1YMPVYdmfUSoTFDzLFvYoSIibjAhGSbx2GZvS8Cy85112dmDjjIRtP_iZq8GBt47mN9OSb3ptC6RIcWdGjgHSKZrrHRoogXGh8Dm_KOohHXDhgze29eCNWXwP5gSn5r_BdU8e9O 2lD12bqTsyCIK4nfc7YGZZTZV9lmqGSiPeGGSpZBwbZx9cnnZ3p_BxTfygT_iJnzyvm1fQ4Q1d5eJNOQ6OlLrH gZP4MFveIrAjVj5YC37VL_mHB9HVgnq38OG 2Qj2bmpgaUjRJNiNDYHZJvOJzRNoipvt6uQCTtSWrImK79L QjFLx7d8hfbGq4xjQbijfhx nDckEFkupL qtrKKaC I3chl42alMJ7Frn9VcisOrif_kB2Szdgo13zH7sdSS5FYDIMWpizWoO3fnzq3EGyC1FnOs 88pBr7RyLNQ==-Gz0AAORtm0_ToNaQL4GOyhFkEEzkwKEFctEDWbl5oDdGNFh9P d 15RmjlS4I1WmhqIJFc93dESAfwc=-e

http://filehippo.com/download/file/.../

Latest 30 of 171 download URLs

Scan spark_install.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.