home

spark_minidownloader.exe

SparkMiniDownloader

Baidu Online Network Technology (Beijing)Co., Ltd

Publisher:
Baidu Inc.  (signed by Baidu Online Network Technology (Beijing)Co., Ltd)

Product:
SparkMiniDownloader

Description:
SparkMiniDownloader

Version:
1.0.0.2

MD5:
ebfc4869d966cac32faf1945a4434b1a

SHA-1:
6088e17cf89ac7926faa79d2c6e02bbb8f58973a

SHA-256:
4473cdc8a7e441e3f41569f80c36164da9f85592487c9efdfc3947efc35a9e3c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:45:35 PM UTC  (today)

File size:
1.2 MB (1,285,824 bytes)

Product version:
1.0.0.2

Copyright:
Copyright (C) 2013 Baidu Inc. All Rights Reserved.

Original file name:
bdMiniDownload.exe

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, PRC)

Digital Signature
Signed by:
Baidu Online Network Technology (Beijing)Co., Ltd

Authority:
VeriSign, Inc.

Valid from:
4/24/2012 2:00:00 AM

Valid to:
4/25/2015 1:59:59 AM

Subject:
CN="Baidu Online Network Technology (Beijing)Co., Ltd", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Baidu Online Network Technology (Beijing)Co., Ltd", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3BDB1994B98BBB19AB55A42337FA4F5C

File PE Metadata
Compilation timestamp:
7/4/2014 9:54:10 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:3r5Fo7o8z3IXiHQSFzlx7VDgZ7ML9/qvs4ixx:Oo87jHnFzlvDg5ML9Z9x

Entry address:
0x7F306

Entry point:
E8, 96, D3, 00, 00, E9, 89, FE, FF, FF, 53, 57, 33, FF, 8B, 44, 24, 10, 0B, C0, 7D, 14, 47, 8B, 54, 24, 0C, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 10, 89, 54, 24, 0C, 8B, 44, 24, 18, 0B, C0, 7D, 13, 8B, 54, 24, 14, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 18, 89, 54, 24, 14, 0B, C0, 75, 1B, 8B, 4C, 24, 14, 8B, 44, 24, 10, 33, D2, F7, F1, 8B, 44, 24, 0C, F7, F1, 8B, C2, 33, D2, 4F, 79, 4E, EB, 53, 8B, D8, 8B, 4C, 24, 14, 8B, 54, 24, 10, 8B, 44, 24, 0C, D1, EB, D1, D9, D1, EA, D1, D8, 0B, DB, 75, F4, F7, F1...
 
[+]

Entropy:
6.6504

Code size:
627 KB (642,048 bytes)

The file spark_minidownloader.exe has been seen being distributed by the following 50 URLs.

http://baidu-browser.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnJ-Kn52jmJo=

http://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKCIn6Oilpg=

https://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKWMpaCgl5k=

https://baidu-browser.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKaIop6lk5o=

https://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKKHn5yfk5Y=

https://baidu-browser.ar.softonic.com/start-download/.../dd152f09ee1b39ce6f29420804516634

http://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKCJoKKmkZc=

http://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKCIp6Ofmp0=

http://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnJ-PnqOflJU=

https://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKOIoqGfkpw=

http://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKCQoZyhmJo=

https://baidu-browser.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKeIpZ-lmpU=

https://baidu-browser.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKOIn6SflZk=

https://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKKKpqGkk5c=

https://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKWPop-omZs=

https://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKOHopyilJ0=

https://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKOJoJ-nmpo=

https://baidu-browser.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKKNoKShlZU=

https://baidu-browser.ar.softonic.com/start-download/.../97904717cf717f574c60e448615782bd

http://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKCKn6Oik5w=

http://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKCOp6Kklpc=

https://baidu-browser.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKONpKColpY=

https://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKGNn5yolJQ=

http://baidu-browser.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKCJpqKmkZY=

https://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKSNoqSok5w=

https://baidu-browser.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKOKp6OimZs=

https://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKGMn5-ompQ=

https://baidu-browser.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKWKnqGkmJo=

https://baidu-browser.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKKHopyml5s=

https://baidu-browser.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKKKoZ-nlZo=

Latest 30 of 348 download URLs

Scan spark_minidownloader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.