home

spark_install.exe

Spark

Baidu Online Network Technology (Beijing) Co.,Ltd.

This is a setup and installation application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Baidu Online Network Technology (Beijing) Co.,Ltd.  (signed and verified)

Product:
Spark

Description:
Baidu Browser

Version:
43.20.1000.205

MD5:
a5448ef97b329831d2fca0e40c87da6c

SHA-1:
bcf45eab46c540426f873e610283bdb34b2b0248

SHA-256:
9d210d3013266d5f818ff5d56cba9fcb42fa98a885728390c76c5d92d1361d51

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 10:03:04 AM UTC  (today)

File size:
45.7 MB (47,887,552 bytes)

Product version:
43.20.1000.205

Copyright:
Copyright (c) Baidu Inc.

Original file name:
SparkSetup.exe

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, PRC)

Common path:
C:\users\{user}\appdata\local\temp\spark_install.exe

Digital Signature
Signed by:
Baidu Online Network Technology (Beijing) Co.,Ltd.

Authority:
VeriSign, Inc.

Valid from:
3/25/2015 7:00:00 AM

Valid to:
3/26/2016 6:59:59 AM

Subject:
CN="Baidu Online Network Technology (Beijing) Co.,Ltd.", OU=Baidu security, O="Baidu Online Network Technology (Beijing) Co.,Ltd.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5FAEE9E83F32948F3B2040AC6DF0145C

File PE Metadata
Compilation timestamp:
12/19/2013 2:14:07 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
786432:6n+ubYwce8HiHadUcZDWcngYxyEaQNtIm7zHfOySpGGpD4g6lKtkwJVaO9E0pS/s:1ubYw8CH1LcngozNym7zHCpxL6EtPy/s

Entry address:
0x5A707

Entry point:
E8, A4, 81, 00, 00, E9, 89, FE, FF, FF, 6A, 00, FF, 15, 7C, 2B, 78, 00, C3, FF, 15, 68, 2B, 78, 00, C2, 04, 00, 8B, FF, 55, 8B, EC, FF, 75, 08, FF, 35, 30, 6C, 4A, 00, FF, 15, 64, 2B, 78, 00, FF, D0, 5D, C2, 04, 00, A1, 2C, 6C, 4A, 00, C3, 8B, FF, 56, FF, 35, 30, 6C, 4A, 00, FF, 15, 64, 2B, 78, 00, 8B, F0, 85, F6, 75, 1B, FF, 35, BC, 77, 76, 00, FF, 15, 80, 2B, 78, 00, 8B, F0, 56, FF, 35, 30, 6C, 4A, 00, FF, 15, 60, 2B, 78, 00, 8B, C6, 5E, C3, 8B, FF, 55, 8B, EC, FF, 75, 0C, FF, 75, 08, FF, 35, C0, 77, 76...
 
[+]

Entropy:
7.9973  (probably packed)

Code size:
550.5 KB (563,712 bytes)

The file spark_install.exe has been seen being distributed by the following 37 URLs.

https://dw.uptodown.com/dwn/LAVmp38DWGChnvvIM57Nnawbs3yvix-LGA25-IieNQ8NuArdhbM_ip1afV_Na4zONvgVqszUPp2s7KkGjmfiKyQTnUcyQ0gfvjANKdMDa-_buQ0BuV-YiBx2ReHpcrfi/XlILLAZmwmUdGCGethtyKpfPLUSYnq4ClIuf9luPYIXFsI210htaVWxs_Kod610PmR8dUyND4mQ1_5QF_cvtlOr-u5OSN6W6NIy2JTnnXvR36hFO1d9Mckn3TISP7iwD/mlot0DkoTPXk0W3RdjM1cLyF8P-3KumVJUDzWs9Pp34I0i2qDA2YLGxY2dj_ZUErvKnXIbNlUbjM4QBi3sZlw-oLZjNfuOnhNhkXUAFgknoOTK_mXBiAL9klm6rl0FCw/.../

http://filehippo.com/download/file/.../

http://www.lo4d.com/get-file/spark-browser/.../

https://dw.uptodown.com/dwn/CTRhQqyV5-LU3-uzJc7AZR1nKDvyJWrDgcDKGRXJnHhMzudj7GhRPNfiVyK0envYkpk5PTILwMHDJIVSicwD-Z9-Hz2rXFLj6e4CK8G5rW_IP2cmNwl-YTdnvsfFvRQO/PWBZWX2dsnVTczYB-qOZ-gESHeXI-OHh1QiSRsZPG4sx9paJvnnYT7u207JGrmsc3UliIDwDYN-HwEFBGj_bWSiMefhToCk_Y9Tqc0pcxGKYSrrS_R8-P_r_LD33DXfd/erLUxgC26Wx3GNlDDcX156Jo53qURqPKCnmixhBR71DhR7i4g2YTnTRRADQoNXkeahICukXwgsfcH1iBoUc6tRXjtqKqb2OJ0qsNJvHePWrAWWqAT85pSVy0Cd8jZ1Lg/.../

http://share2.earthlinktele.com/download.aspx?file=1368575220&sig=MzAvMTAvMjAxNiAyMTo1NjowOA==

https://dw18.uptodown.com/dwn/cbmL_rT17xOJWwuK51i0hGIEFkU3r_DKpauYbV02GhRu3lpAYbwy5JVaEXZTAOuW1xDT6-bt4KS95dbDYpZGE-t018IZ_39VQn8VEb2T9XxyKZJtDrjG_1FuG8l5zvrR/rUgoCBGdgOBtmkP-Lu4SsA_cGVojn33amzWo3W6J1HMCdwjwN_CIbFoUyjwl19E-GmF-WkVgxTStVx2iY-Uns5W18wjYxEUEYM-LaSkTaqcZ5zGSXeLxRCyVHGrOdJ2R/PUwrfTz531Z7QUfNfz55eATfPFyYiQyiQL2nIu8PXMDCdj1r5Fdd2y-oMJD5JgJ41CAw6FGWwj4pn7k7eNxBAKr85SQW8IXBQOh8yT6roEgoBx3kem80vdkfMQVw-eFr/.../baidu-spark-browser-43-20-1000-205-multi-win.exe

http://dw.ar.uptodown.com/dl/1445188961/.../baidu-spark-browser-43-20-1000-205-multi-win.exe

http://filehippo.com/download/file/.../

http://dw.ar.uptodown.com/dl/1445689006/.../baidu-spark-browser-43-20-1000-205-multi-win.exe

http://dw.ar.uptodown.com/dl/1444860037/.../baidu-spark-browser-43-20-1000-205-multi-win.exe

http://dw.th.uptodown.com/dl/1445745457/.../baidu-spark-browser-43-20-1000-205-multi-win.exe

http://files.letoltes.com/.../Baidu Browser 43.20.1000.205.exe

http://dw.ar.uptodown.com/dl/1444835874/.../baidu-spark-browser-43-20-1000-205-multi-win.exe

http://filehippo.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/eb95b4407fffd076b67a41ca36035152/562131b1/soft/.../baidu-spark-browser_43-20-1000-205_en_431171.exe

http://dw.ar.uptodown.com/dl/1445064247/.../baidu-spark-browser-43-20-1000-205-multi-win.exe

http://filehippo.com/download/file/.../

http://dw.th.uptodown.com/dl/1445093158/.../baidu-spark-browser-43-20-1000-205-multi-win.exe

http://filehippo.com/download/file/.../

http://dw.th.uptodown.com/dl/1445691907/.../baidu-spark-browser-43-20-1000-205-multi-win.exe

http://dw.ar.uptodown.com/dl/1445597012/.../baidu-spark-browser-43-20-1000-205-multi-win.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://dw.th.uptodown.com/dl/1446140101/.../baidu-spark-browser-43-20-1000-205-multi-win.exe

http://dw.ar.uptodown.com/dl/1445382358/.../baidu-spark-browser-43-20-1000-205-multi-win.exe

http://th.browser.baidu.com/.../fullpackage.exe

http://dw.ar.uptodown.com/dl/1445040333/.../baidu-spark-browser-43-20-1000-205-multi-win.exe

http://dw4.fr.uptodown.com/dw/1446037624/.../baidu-spark-browser-43-20-1000-205-multi-win.exe

http://dw.ar.uptodown.com/dl/1445079066/.../baidu-spark-browser-43-20-1000-205-multi-win.exe

http://dw.th.uptodown.com/dl/1445753022/.../baidu-spark-browser-43-20-1000-205-multi-win.exe

Latest 30 of 37 download URLs

Scan spark_install.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.