» 360browser.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

360browser.exe

360 Browser

QIHU 360 SOFTWARE CO. LIMITED

File name:

360browser.exe

Publisher:

Qihu 360 Software Co., Ltd. (signed by QIHU 360 SOFTWARE CO. LIMITED)

Product:

360 Browser

Version:

7.5.1.116

MD5:

18c23f7817223845617c44e5481a56a0

SHA-1:

4ca87f84ac17d8e718e7e2f5a103158a902476d2

SHA-256:

a27f5b3bdb61bfebce4b2484f93fb2222b8a06628ba1be9b9a08d4c976535dd4

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/23/2024 10:30:01 AM UTC (today)

File size:

2.2 MB (2,280,264 bytes)

Product version:

7.5.1.116

Original file name:

360browser.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\360browser\browser\application\360browser.exe

Digital Signature

Signed by:

QIHU 360 SOFTWARE CO. LIMITED

Authority:

VeriSign, Inc.

Valid from:

3/26/2013 12:00:00 AM

Valid to:

3/25/2016 11:59:59 PM

Subject:

CN=QIHU 360 SOFTWARE CO. LIMITED, OU=Client Security Group, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=QIHU 360 SOFTWARE CO. LIMITED, L=Hong Kong, S=Hong Kong, C=HK

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5D8B3CDBA4ABC478E51C42337F2FF655

File PE Metadata

Compilation timestamp:

3/28/2014 6:54:43 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

49152:X8MuID2IbDuEj7VkPQykLC5eJAxi7+d+kJxT497WZbToW7VoTSGAeZ1BM4mYSTS8:X8SD2IWEj+kLBBM4mYB039

Entry address:

0xC36EA

Entry point:

E8, BA, B9, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 56, 8B, F1, C6, 46, 0C, 00, 85, C0, 75, 63, E8, 84, 8B, 00, 00, 89, 46, 08, 8B, 48, 6C, 89, 0E, 8B, 48, 68, 89, 4E, 04, 8B, 0E, 3B, 0D, 48, 74, 5B, 00, 74, 12, 8B, 0D, FC, 71, 5B, 00, 85, 48, 70, 75, 07, E8, 33, 89, 00, 00, 89, 06, 8B, 46, 04, 3B, 05, 18, 7A, 5B, 00, 74, 16, 8B, 46, 08, 8B, 0D, FC, 71, 5B, 00, 85, 48, 70, 75, 08, E8, 13, BC, 00, 00, 89, 46, 04, 8B, 46, 08, F6, 40, 70, 02, 75, 14, 83, 48, 70, 02, C6, 46, 0C, 01, EB, 0A... 
[+]

Code size:

929.5 KB (951,808 bytes)

Shell Open Command

Open type:

ftp

Command:

"C:\users\{user}\appdata\local\360browser\browser\application\360browser.exe" -- "%1"

The file 360browser.exe has been discovered within the following program.

360 Browser by Qihoo

360 Secure Browser uses the Trident layout engine (as does Internet Explorer) and very difficult to uninstall. Furthermore, whenever a user attempts to install another browser, a warning pop-up claims that the new browser is unsafe.

www.360safe.com/browser.html

26% remove it

Scan 360browser.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.