» 360browser.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

360browser.exe

360 Browser

QIHU 360 SOFTWARE CO. LIMITED

File name:

360browser.exe

Publisher:

Qihu 360 Software Co., Ltd. (signed by QIHU 360 SOFTWARE CO. LIMITED)

Product:

360 Browser

Version:

7.5.2.110

MD5:

1820c0c70b3f6cf3b75e674f8054c265

SHA-1:

073b0243b7d82bff60fb63035d114c2b1c5ff858

SHA-256:

123669929c6304507af0ed8c1deb301a2fc29db81102a18c8ea49aeb33aa574d

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/26/2024 11:49:53 PM UTC (a few moments ago)

File size:

2.2 MB (2,335,560 bytes)

Product version:

7.5.2.110

Original file name:

360browser.exe

File type:

Executable application (Win32 EXE)

Language:

engleski (SAD)

Common path:

C:\users\{user}\appdata\local\360browser\browser\application\360browser.exe

Digital Signature

Signed by:

QIHU 360 SOFTWARE CO. LIMITED

Authority:

VeriSign, Inc.

Valid from:

3/26/2013 1:00:00 AM

Valid to:

3/26/2016 12:59:59 AM

Subject:

CN=QIHU 360 SOFTWARE CO. LIMITED, OU=Client Security Group, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=QIHU 360 SOFTWARE CO. LIMITED, L=Hong Kong, S=Hong Kong, C=HK

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5D8B3CDBA4ABC478E51C42337F2FF655

File PE Metadata

Compilation timestamp:

9/22/2014 2:34:56 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

49152:YGm3W9XfzspU4u3eEHVhjCEbsQFH7+d+kJxT497WZbToW7VoTSGAeZ6BM4mYLTIc:rmkXwtuuEHVh/gBM4mYwI3p

Entry address:

0xC65EA

Entry point:

E8, 37, BF, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 56, 8B, F1, C6, 46, 0C, 00, 85, C0, 75, 63, E8, C1, 90, 00, 00, 89, 46, 08, 8B, 48, 6C, 89, 0E, 8B, 48, 68, 89, 4E, 04, 8B, 0E, 3B, 0D, 48, 44, 5C, 00, 74, 12, 8B, 0D, FC, 41, 5C, 00, 85, 48, 70, 75, 07, E8, 33, 8E, 00, 00, 89, 06, 8B, 46, 04, 3B, 05, 18, 4A, 5C, 00, 74, 16, 8B, 46, 08, 8B, 0D, FC, 41, 5C, 00, 85, 48, 70, 75, 08, E8, 90, C1, 00, 00, 89, 46, 04, 8B, 46, 08, F6, 40, 70, 02, 75, 14, 83, 48, 70, 02, C6, 46, 0C, 01, EB, 0A... 
[+]

Code size:

978.5 KB (1,001,984 bytes)

Shell Open Command

Open type:

ftp

Command:

"C:\users\{user}\appdata\local\360browser\browser\application\360browser.exe" -- "%1"

The file 360browser.exe has been discovered within the following program.

360 Browser by Qihoo

360 Secure Browser uses the Trident layout engine (as does Internet Explorer) and very difficult to uninstall. Furthermore, whenever a user attempts to install another browser, a warning pop-up claims that the new browser is unsafe.

www.360safe.com/browser.html

26% remove it

Scan 360browser.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.