home

ucbrowser_v5.7.14488.1207_windows_pf101_(build16072217).exe

UC Browser

UCWeb Inc.

Publisher:
UCWeb Inc.

Product:
UC Browser

Description:
UCBrowser Online Installer

Version:
1.0.0.0

MD5:
34cb0443e735bebd8847f603c44f120f

SHA-1:
e4911e8d7832419f1b283bffeb0ca4f10a6c70c2

SHA-256:
7d28852b3455331a062e20de0befa2a6d575428eed1ff22224ad4b7a3d61eed4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 2:22:41 AM UTC  (today)

File size:
1.4 MB (1,458,650 bytes)

Product version:
1.0.0.0

Copyright:
Copyright 2008-2014 UCWeb Inc. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, PRC)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\ucbrowser_v5.7.14488.1207_windows_pf101_(build16072217).exe

File PE Metadata
Compilation timestamp:
7/21/2016 11:11:24 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
24576:6zYJTZ6IY57bKxnNpQ3eHWNkKtD1sPTDZ4l5jhRcEbNttbufcFixNlWy4eIngZFJ:4YX2baf5WOEDETDZ65sstuIixONqkR8n

Entry address:
0x140000

Entry point:
90, 90, B9, 5D, 7A, 15, 00, 90, 90, 68, 20, 00, 54, 00, 5F, 68, 98, 05, 00, 00, 5A, 90, 31, 0C, 3A, 90, 90, 83, EA, 03, 4A, 90, 75, F4, 90, 90, B5, 07, 14, 00, 5D, 7A, 15, 00, 5D, 7A, 55, 00, E5, D8, 1D, 00, DD, F1, 06, 00, 87, EB, 06, 00, 5D, CA, 17, 00, 5C, 7A, 15, 00, F1, 7A, 5E, 00, 31, BD, 59, 00, 21, BD, 59, 00, 05, DA, 19, 00, 37, BD, 19, 00, 27, BD, 19, 00, F1, 8E, 1F, 00, 37, BD, 19, 00, 27, BD, 19, 00, 5D, 7A, 15, 00, 5D, 7A, 15, 00, 5D, 7A, 15, 00, 5D, 7A, 15, 00, 49, 79, 5E, 00, 5D, 7A, 15, 00...
 
[+]

Entropy:
7.0547

Code size:
700 KB (716,800 bytes)

The file ucbrowser_v5.7.14488.1207_windows_pf101_(build16072217).exe has been seen being distributed by the following URL.

http://download.ucweb.com/files/UCBrowser/en-us/.../UCBrowser_V5.7.14488.1207_windows_pf101_(Build16072217).exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.