home

pc_faster_setup_mini_b89_1179908841.exe

Baidu PC Faster

Baidu Online Network Technology (Beijing)Co., Ltd

This is a setup and installation application. The file has been seen being downloaded from byvue.com and multiple other hosts.
Publisher:
Baidu Inc.  (signed by Baidu Online Network Technology (Beijing)Co., Ltd)

Product:
Baidu PC Faster

Description:
Baidu PC Faster MiniSetup

Version:
4,0,0,53296

MD5:
7b63c3017760509528ec2f121fb1d4cf

SHA-1:
3b9488b6593ae59ecdb0ef9504fea59abffcd1fd

SHA-256:
f2bc091fbadc1dc52908bb195fd8848cdbae6cec07805f742aebfb23c6637316

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:18:59 PM UTC  (today)

File size:
1.5 MB (1,572,384 bytes)

Product version:
4,0,0,53296

Copyright:
Copyright (C) 2012 Baidu, Inc. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\pc_faster_setup_mini_b89_1179908841.exe

Digital Signature
Signed by:
Baidu Online Network Technology (Beijing)Co., Ltd

Authority:
VeriSign, Inc.

Valid from:
4/23/2012 9:00:00 PM

Valid to:
4/24/2015 8:59:59 PM

Subject:
CN="Baidu Online Network Technology (Beijing)Co., Ltd", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Baidu Online Network Technology (Beijing)Co., Ltd", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3BDB1994B98BBB19AB55A42337FA4F5C

File PE Metadata
Compilation timestamp:
12/13/2013 1:09:33 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:apJkhGg7dMuPN10hOUrkZxmTVpDOkyTnFcbpUiVZA:afWtNKhhwZxmTVpDuslA

Entry address:
0xADCAA

Entry point:
E8, B8, FE, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, 3D, 68, A4, 4F, 00, 00, 74, 15, 68, 68, A4, 4F, 00, E8, C4, FF, 00, 00, 59, 85, C0, 74, 06, FF, 15, 68, A4, 4F, 00, E8, 53, 79, 00, 00, 85, C0, 74, 07, 50, E8, 0B, 7B, 00, 00, 59, FF, 75, 08, FF, 15, 48, 83, 4F, 00, CC, 6A, 0C, 68, 88, F5, 51, 00, E8, 0F, 1E, 00, 00, E8, A6, 79, 00, 00, 83, 65, FC, 00, FF, 70, 58, FF, 50, 54, 50, E8, A2, FF, FF, FF, 8B, 45, EC, 8B, 08, 8B, 09, 89, 4D, E4, 50, 51, E8, 18, F9, 00, 00, 59, 59, C3, 8B, 65, E8, FF...
 
[+]

Code size:
986.5 KB (1,010,176 bytes)

The file pc_faster_setup_mini_b89_1179908841.exe has been seen being distributed by the following 45 URLs.

http://byvue.com/?a=233200&c=1210090&m=28&s2=DN&s3=530cde10d2a194e62500344c

https://www.loltrk.com/c/r/574/.../

http://www.searchbytes.com/go.php?hid=Ja-ZKSf-2AYggmhhCZxqM_nWyZrzWL_wTM0eB3iSJW-MGAt82FYbgZhRCrxWmMaMyZrGW__gTZ0s9pl_JazWGAfHud1mgMsXwpctminGSq38jdphAeIP9ylh7hzwGSt8ud1KvvsfwgchmnaXyWr-WApzTS0eBNir7vz1GwfL2BYCgNhwwvx3mnaySbrtjnpzA1IX9pin7qzeGrtkuX18vWsXCaxMmqamyZrkjdpmTm0RBaiqJa-mGAt8ud1mgasXwpcwMynaSSr2Wp_PAyIx93iM7hzRGyt6uiY1vPsgwMxXMqneSS3KjVpHARIsBXlq7wzmKIfour11vwhqwScnMSngyc3KjApKAXIR9glm7h-jGXf4ur1EvYsRwscNMwavS3rdjn_MTN0wBaiyJszPGstD25YRgvsCwjcqMhajyZZLjppRAgIRBViaJPzWGAtzuV1PvcsswqcnM_nWSW3KjTptAcItBViWJW-SK_fk2BYGvvshwgxamaaSy4r9W4pKAR0wByiq7s-ZGbf0uXYbvYhsCWcgmraZySrGW4pGAv0s9QiZJa-XKpfGuq&tu=4819

http://byvue.com/?a=233200&c=1210090&m=28&s2=ZP&s3=papa-fay-nnyjo33d_extintor,extintores,incendio,classe d,po,quimico,cloreto,sodio_&s4=WlZkODhiNTczMmQyZGUxMWUzYWY1NTBhYmVhN2IwZWFlMjEzOTkxMzQwMzM

http://byvue.com/?a=233200&c=1210090&m=28&s2=ZP&s3=hotel-pet-vOta8X2y__&s4=WlY3NDlhMWM1M2NjMDAxMWUzOWY1YzBhYmVhN2IwZWFlMjEzOTgzNzg4MTA

http://engine.phn.doublepimp.com/fp.engine?id=ca096f11-abc3-472a-b692-f22b61ba9adc&rand=0.7021477944217622&ver=async&time=180&referrerUrl=

http://byvue.com/?a=233200&c=1210090&m=28&s2=ZP&s3=yankee-tun-FynDU5q3__&s4=WlZlNGM4YmFjMGQzZDIxMWUzYWY1NTBhYmVhN2IwZWFlMjEzOTkyMzg4NTM

http://byvue.com/?a=233200&c=1210090&m=28&s2=DN&s3=512f5e6da49b58241c000755

http://engine.phn.doublepimp.com/fp.engine?id=ca096f11-abc3-472a-b692-f22b61ba9adc&rand=0.961409761570394&ver=async&time=180&referrerUrl=

http://engine.phn.doublepimp.com/fp.engine?id=ca096f11-abc3-472a-b692-f22b61ba9adc&rand=0.0972955385223031&ver=async&time=180&referrerUrl=

http://byvue.com/?a=233200&c=1210090&m=28&s2=ZP&s3=papa-oat-RFUrbqJc_blackboard_&s4=WlY0Y2E3MDdhMmQ0YjkxMWUzOGVmNzBlMWQ1N2IwYjk3NjEzOTkzMzc4MTE

http://byvue.com/?a=233200&c=1210090&m=28&s2=DN&s3=5346b2fce2cc0a1409014de9

http://www.pcfaster.com/cgi/s2s/dl.php?cr=&lang=pt&ptn=neverblue&host=http://.../&sid=867393284

http://byvue.com/?a=233200&c=1210090&m=28&s2=ZP&s3=tango-wow-VedcCUNT__&s4=WlY5MzY0YmU1MGNjMDYxMWUzODEyYTBlMWQ1N2IwYjk3NjEzOTgzODE0Mzk

http://byvue.com/?a=233200&c=1210090&m=28&s2=ZP&s3=kilo-rib-cfBFUeTd_nunca bata em uma mulher,veja o que pode acontecer..._&s4=WlY1MmQ3NGZjZWQyZGIxMWUzOGVmNzBlMWQ1N2IwYjk3NjEzOTkxMzI1MjM

http://engine.phn.doublepimp.com/fp.engine?id=ca096f11-abc3-472a-b692-f22b61ba9adc&rand=0.7958487106952816&ver=async&time=180&referrerUrl=http://www.putariabrasileira.com/.../

http://engine.phn.doublepimp.com/fp.engine?id=ca096f11-abc3-472a-b692-f22b61ba9adc&rand=0.2224632736761123&ver=async&time=180&referrerUrl=

http://engine.phn.doublepimp.com/fp.engine?id=ca096f11-abc3-472a-b692-f22b61ba9adc&rand=0.9005354819819331&ver=async&time=180&referrerUrl=http://www.eroticobrasil.com/videos-de-sexo/.../

http://byvue.com/?a=233200&c=1210090&m=28&s2=ZP&s3=november-zed-42AxHmqQ__&s4=WlZlYjI5NjBkMGQyZTgxMWUzYWY1NTBhYmVhN2IwZWFlMjEzOTkxMzgzNTk

http://engine.phn.doublepimp.com/fp.engine?id=ca096f11-abc3-472a-b692-f22b61ba9adc&rand=0.06965056201443076&ver=async&time=180&referrerUrl=http://.../

http://www.pcfaster.com/cgi/s2s/dl.php?cr=&lang=pt&ptn=neverblue&host=http://.../&sid=1081765437

http://www.pcfaster.com/cgi/s2s/dl.php?cr=&lang=pt&ptn=neverblue&host=http://.../&sid=1063217101

http://byvue.com/?a=233200&c=1210090&m=28&s2=PC-BR&s3=22561

http://popcash.net/world/sgo/12454/22561/.../aHR0cDovL2h1bmRlZmVzdGl2YWxlbi5uby9iaW5nLmh0bWw=

http://www.pcfaster.com/cgi/s2s/dl.php?cr=&lang=pt&ptn=neverblue&host=http://.../&sid=1217016775

http://www.pcfaster.com/cgi/s2s/dl.php?cr=&lang=pt&ptn=neverblue&host=http://.../&sid=842456607

http://www.pcfaster.com/cgi/s2s/dl.php?cr=&lang=pt&ptn=neverblue&host=http://.../&sid=899326657

http://byvue.com/?a=233200&c=1210090&m=28&s2=MT-BR&s3=source=1375-DP1715AAAAAA

http://cpvfeed.mediatraffic.com/redir.php?ac=1375&sac=DP1715AAAAAA_RON&dat=7e26ca369df35e10b770abb7471298ff&cpv=0.00100&url_pop=http://byvue.com/?a=233200&c=1210090&m=28&s2=MT-BR&s3=source=1375-DP1715AAAAAA&ctl=Jq2ZSHKnM0FsCA==&def=&hwd=&md=3&mp=12&mod=RON&kw=walmart.com.br&fci=&ffc=&rqu1=www.walmart.com.br/&rqu2=comparador?refs=389701&fq=c:401/.../416&ps=20&o=orderbytopsaledesc&utm_term=buscape&utm_content=buscape&utm_source=lomadee&utm_medium=afiliados&utm_campaign=lomadee

http://www.pcfaster.com/cgi/s2s/dl.php?cr=&lang=pt&ptn=neverblue&host=http://.../&sid=1187541943

Latest 30 of 45 download URLs

Scan pc_faster_setup_mini_b89_1179908841.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.