» 360browser.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

360browser.exe

360 Browser

QIHU 360 SOFTWARE CO. LIMITED

File name:

360browser.exe

Publisher:

Qihu 360 Software Co., Ltd. (signed by QIHU 360 SOFTWARE CO. LIMITED)

Product:

360 Browser

Version:

7.5.2.104

MD5:

7bc0f12cd44807f37f62c581c1f19860

SHA-1:

95b0ca2668754a4798eab602d04d23d4c4c5b613

SHA-256:

761583427999a08e4488977e5bfe04c8781f0534de3cab9cc1d95d9e29fc3fdd

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/5/2024 1:57:46 PM UTC (today)

File size:

2.2 MB (2,336,584 bytes)

Product version:

7.5.2.104

Original file name:

360browser.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\360browser\browser\application\360browser.exe

Digital Signature

Signed by:

QIHU 360 SOFTWARE CO. LIMITED

Authority:

VeriSign, Inc.

Valid from:

3/26/2013 1:00:00 AM

Valid to:

3/26/2016 12:59:59 AM

Subject:

CN=QIHU 360 SOFTWARE CO. LIMITED, OU=Client Security Group, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=QIHU 360 SOFTWARE CO. LIMITED, L=Hong Kong, S=Hong Kong, C=HK

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5D8B3CDBA4ABC478E51C42337F2FF655

File PE Metadata

Compilation timestamp:

7/2/2014 12:02:12 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

49152:RYR5PB4ZGL0689SOQlMHdiIGYCdc7+d+kJxT497WZbToW7VoTSGAeZIBM4mY/Tqr:RYRX4ZZFS7lMHd4BM4mYuf3lF

Entry address:

0xC6C0A

Entry point:

E8, 47, BF, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 56, 8B, F1, C6, 46, 0C, 00, 85, C0, 75, 63, E8, C4, 90, 00, 00, 89, 46, 08, 8B, 48, 6C, 89, 0E, 8B, 48, 68, 89, 4E, 04, 8B, 0E, 3B, 0D, 48, 44, 5C, 00, 74, 12, 8B, 0D, FC, 41, 5C, 00, 85, 48, 70, 75, 07, E8, 36, 8E, 00, 00, 89, 06, 8B, 46, 04, 3B, 05, 18, 4A, 5C, 00, 74, 16, 8B, 46, 08, 8B, 0D, FC, 41, 5C, 00, 85, 48, 70, 75, 08, E8, A0, C1, 00, 00, 89, 46, 04, 8B, 46, 08, F6, 40, 70, 02, 75, 14, 83, 48, 70, 02, C6, 46, 0C, 01, EB, 0A... 
[+]

Entropy:

6.3228

Code size:

979.5 KB (1,003,008 bytes)

Shell Open Command

Open type:

ftp

Command:

"C:\users\{user}\appdata\local\360browser\browser\application\360browser.exe" -- "%1"

The file 360browser.exe has been discovered within the following programs.

360 Browser by Qihoo

360 Secure Browser uses the Trident layout engine (as does Internet Explorer) and very difficult to uninstall. Furthermore, whenever a user attempts to install another browser, a warning pop-up claims that the new browser is unsafe.

www.360safe.com/browser.html

26% remove it

Scan 360browser.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.