home

ucbrowser_v5.6.13108.1201_windows_pf101_(build16061315).exe

UC Browser

TAOBAO (CHINA) SOFTWARE CO.,LTD.

The application ucbrowser_v5.6.13108.1201_windows_pf101_(build16061315).exe by TAOBAO (CHINA) SOFTWARE CO.,LTD has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from sahabweb.com and multiple other hosts.
Publisher:
UCWeb Inc.  (signed by TAOBAO (CHINA) SOFTWARE CO.,LTD.)

Product:
UC Browser

Version:
5.6.13108.1201

MD5:
df10275cd3f13014809aa4fde5ea8854

SHA-1:
310826b3592de3f8691d421da7d07b21494a9689

SHA-256:
ba810412f7587dd5aa305a721da31fb734d643489b61c9c28c284251bd81a4cb

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/17/2024 6:40:51 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Taobao (L)
16.7.16.12

File size:
48.7 MB (51,112,608 bytes)

Product version:
5.6.13108.1201

Copyright:
Copyright 2008-2014 UCWeb Inc. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\ucbrowser_v5.6.13108.1201_windows_pf101_(build16061315).exe

Digital Signature
Signed by:
TAOBAO (CHINA) SOFTWARE CO.,LTD.

Authority:
VeriSign, Inc.

Valid from:
5/23/2014 5:30:00 AM

Valid to:
6/22/2016 5:29:59 AM

Subject:
CN="TAOBAO (CHINA) SOFTWARE CO.,LTD.", OU=RDC, O="TAOBAO (CHINA) SOFTWARE CO.,LTD.", L=Hangzhou, S=Zhejiang, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
348A4D46C9A1A9EDC2B4818465A66BED

File PE Metadata
Compilation timestamp:
6/7/2016 3:06:55 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
786432:75w/8L6owJ7lKe6e2r4hDh5+YX5WEzmXIfoIG/Id6wcyipUFdYhnbKbnBJSaoMDA:7i/8L6oU7G4Nv+05FfoDrkipidmcEoDA

Entry address:
0xA1F07

Entry point:
E8, 7A, C8, 00, 00, E9, 7F, FE, FF, FF, 3B, 0D, E0, 17, 4C, 00, 75, 02, F3, C3, E9, C9, 12, 00, 00, 55, 8B, EC, 83, EC, 14, 53, 56, 33, DB, 57, 8B, 7D, 08, 89, 5D, F8, 89, 5D, F4, 89, 5D, FC, 85, FF, 75, 18, E8, 7A, 1F, 00, 00, 6A, 16, 5E, 89, 30, E8, 8E, D1, FF, FF, 8B, C6, 5F, 5E, 5B, 8B, E5, 5D, C3, 6A, 24, 68, FF, 00, 00, 00, 57, E8, 79, 89, FB, FF, 8B, 75, 0C, 83, C4, 0C, 85, F6, 74, D1, 39, 5E, 04, 7F, 12, 7C, 04, 39, 1E, 73, 0C, E8, 40, 1F, 00, 00, 6A, 16, 5E, 89, 30, EB, C9, 6A, 07, 58, 39, 46, 04...
 
[+]

Entropy:
7.9979  (probably packed)

Code size:
768 KB (786,432 bytes)

The file ucbrowser_v5.6.13108.1201_windows_pf101_(build16061315).exe has been seen being distributed by the following 25 URLs.

https://sahabweb.com/download/.../UCBrowser.exe

http://uc-browser.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAN8EJnRARyiInv YnRfFE/.../2rOqu2uIn8OjuReera8pz925w ZaVvBqdCA8iC3escenF3uqjDnXKnahgQ9PALitQ2VdfJBVdqE5yub8NevNeLt3MLyWnz6YgBF160clAEHSim9PmLl1Ow==

http://cdn.portalprogramas-download.com/d/.../uc-browser

http://download.ucweb.com/files/UCBrowser/ru/.../UCBrowser_V5.6.13108.1201_windows_pf101_(Build16061315).exe

http://dw.uptodown.com/dwn/2KS5znUB1LXJNxs8B7FSmCHLYeeM84If4iruoG_rzWlA9q-NmkRkc9TGcUSH4-xsdd3baWO4S3fm9OU0no1HCu4pGuQy3iHUlO2JH8u2PrtNtA70yYggpR4fG8qd8FWc/0lMWbSERwo4Law4ilwYPXclaLjWmsmRUq7hLkn3HISuRhZvM9oQpxe4dIggRoQnreIxJRO_HHChkgqnSwDLBOpzxFmtXcPTb6nEWUvuR2sZoiekcq_5anSG_JexS0fvN/nmNeJlyRA6gn26v3YlB_sGxEzvclyVsK6FdbFx7wNGz2ioWcAynIj1Ix0SSHCZGTiEa3_dVZkA0UT2_sxrh8U1KIR8qmPO5H61pRrSFnhsovId_iGR80AbZaVqQU-EX9/.../

http://cdn.portalprogramas-download.com/d/.../uc-browser

http://bcdn.softcdn.ru/5.html?parameter=UCBrowser_Rus_Setup.exe&clr=1

http://uc-browser.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/.../DPp7LaALOLwOSOtRHpWH4J6YaLoDYV504ELBhJ1wbvrQyvM24xrVdohbQodka8tMep4mVBSsAUfw42K2sKVUD0L3nryg==

http://dw.uptodown.com/dwn/WinVjDGQ8gPdSJ7TfuZ2tDKwxTZDsLgWqNk9fdD9lzuHHZ-vKKwqJOY1cwYFuUVvy2Fd_QFFwn10ra4XTj0pMvarSwXogSAkLRZFoLaLG9zSXH_LiTfYZ1J9xA9snXbH/8GQdb9ohn3DgLsOaDFsrZv6P4ruax_YOVKjyjCafhfqpHRiku5-uDSqyvDUEwc0ZFPtU055IyrDXfbY_zOSjLQGnaGrscBZhSH3AYTP67eeZ9TibQ5wJdb_k4q7AIYMn/7ZGjR0LW82GjvwjUne3RAUb59svCuZJ6D8a6xyu62JRkyaildWvYS_SIxY08DRjsMjNPba30tRUKSZEN48HTcU5GT-638wElvhNjGfBRLm_Jnq8NIym_xXGWHukuX9eE/.../

http://pdds.ucweb.com/.../package?uc_param_str=ve&product=ucbrowser&fileid2=18926&pfid=101&bid=33188&lang=spanish&from=www-dft-dft-pc

http://dw.uptodown.com/dwn/2_FTRGLoVpYHHS_6ykuf0wqDXUOAbGddlxzamllGfSRK_ALPZtesJVFAxBil9eO1GjD-YmjZ_Tsgpnb0gUjTuson7wwefBW-03SZUrKYGIgR1YUAwxNB7nPatCR_iGOU/q8FBTaXnflf6b3syi3zBBfle2oW0TWYOKqLopEI47_WXrlBWK8T94gzSNJqxgNKSL1XT1jHTS5xyIj1YpLgH4HYp1SVbNoz9I4sWmpxrW-Rm3Uc-bUW-yh6D_HWYrvw3/5KuVeMKWYkTTVgSnSHIPZmLQZyQIUctM2UoF6zxlP5r8FLHvbSoWKZbdKol-zumCQSoJYwzWusmcTmQrmm3boRQCyTNrWD-D7VAU6SGVNEC5rsmb8WU_rvEtGFae9wPo/.../

http://dw.uptodown.com/dwn/VHYd0OctuV59SgJfObdLRPJz_WkDIqJZQBnBGGN9yhADBHi0OkF5RxVqFQD4rk69yrWzplKHQgshzOGAFHX_NyYWXest5SJ0uc32YqYpGPou9P0ophUY18Cdc6kwirFq/Su27-7YI20byE40Bwf-FM510rmZvxDvzMmgoVHxa9ASwr_IOSBR5ndxkaM8vj115n6rxji_cYhz5NbUn59yFAY0MLpLQNjtQL6160lDVCm86OocF7ubnU3fZ8cDU7xkj/EAgo7_FApRdxTNvRIYZ7gheLskZDqT3JBMSHqa4Y1V_-OV4y6ZmKCYFJwAivxxMQogJz08g1VFnFYQGiTF6P24ZPfOLy6Fa-xdVbKtXV2n6GlKhgLHD_0DqdKpsp4wli/.../

http://dw6.uptodown.com/dwn/pbwIpl5voFRZ9MVTEQlxMki1z-Gp-ohizYizDQko2SLZJiEq46Oqv9mxhsY1ZhGWwS9q9NzxMyS2f4NZe23Chwi30qQzGnJ3imtF5g_cE8xgL-8gnHpkJDNI8SbA161W/3zVj7J_QOGkTIPN3VuA1iJFbSrV4YF6GkIKrfyRpk1LJh5biLJ_mQZ4wqE5BAIISFfcGobe4WTflNKEYxSbeBJMSWFJRASfrk_yxWjEbXgwwtm-V_-ZAOcLVdIg-CtBV/u62h2ZXClG09FDIcyL0U59EHoWiGXaGPf_iGXSsQb33ll4j-Q_7WfvX5zcSIWoaOgDQTEwPsUSE2ogXRqcOd3l9AubpSuGearAwynrHgjE7TSek_rE19SYywcYHqPpJN/.../uc-browser-for-pc-5-6-13108-1201.exe

http://uc-browser.fr.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAN8EJnRARyiInv YnRfFE/.../2rOqu2uIn8OjuReera8pz925w ZaVvBqdCA8iC3escenF3uqjDnXKnahgQ9PALitQ2VdfJBVdqE5yub8NevNeLt3MLyWnz6YgBF160clAEHSim9PmLl1Ow==

temp:UCBrowser_V5.6.13108.1201_windows_pf101_(Build16061315).exe

http://gsf-cf.softonic.com/310/826/.../UCBrowser_V5-6-13108-1201_windows_pf101_-Build16061315-.exe

http://pdds.ucweb.com/.../bypfid?product=UCBrowser&pfid=101&lang=en-us&bid=354&direct=true&from=PC_banner

http://pdds.ucweb.com/.../package?uc_param_str=ve&product=ucbrowser&fileid2=18928&pfid=101&bid=401&lang=vietnamese&from=www-dft-dft-pc

http://download.ucweb.com/files/UCBrowser/en-us/.../UCBrowser_V5.6.13108.1201_windows_pf101_(Build16061315).exe

http://pdds.ucweb.com/download/newest/UCBrowser/id/101/.../PC_banner

http://pdds.ucweb.com/.../package?uc_param_str=ve&product=ucbrowser&fileid2=18924&pfid=101&bid=402&lang=indonesia&from=www-dft-dft-pc

http://pdds.ucweb.com/download/newest/UCBrowser/en-us/101/.../softonic

http://pdds.ucweb.com/.../package?uc_param_str=ve&product=ucbrowser&fileid2=18927&pfid=101&bid=33033&lang=portuguese&from=www-dft-dft-pc

http://pdds.ucweb.com/.../package?uc_param_str=ve&product=ucbrowser&fileid2=18923&pfid=101&bid=354&lang=english&from=www-dft-dft-pc

http://pdds.ucweb.com/download/newest/UCBrowser/en-us/101/.../PC_banner

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.