» 360browser.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

360browser.exe

360 Browser

QIHU 360 SOFTWARE CO. LIMITED

File name:

360browser.exe

Publisher:

Qihu 360 Software Co., Ltd. (signed by QIHU 360 SOFTWARE CO. LIMITED)

Product:

360 Browser

Version:

7.5.2.106

MD5:

1223bafcd4e4f0d1bab4733da0afb976

SHA-1:

c92cc1dfeb739532e3bdb6a84632170e99a4d9af

SHA-256:

bb54960b2e948cdc653a239244f93259208be84e7d0faea5ecbe118a242b4ac0

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 1:14:30 PM UTC (today)

File size:

2.2 MB (2,336,584 bytes)

Product version:

7.5.2.106

Original file name:

360browser.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\360browser\browser\application\360browser.exe

Digital Signature

Signed by:

QIHU 360 SOFTWARE CO. LIMITED

Authority:

VeriSign, Inc.

Valid from:

3/26/2013 1:00:00 AM

Valid to:

3/26/2016 12:59:59 AM

Subject:

CN=QIHU 360 SOFTWARE CO. LIMITED, OU=Client Security Group, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=QIHU 360 SOFTWARE CO. LIMITED, L=Hong Kong, S=Hong Kong, C=HK

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5D8B3CDBA4ABC478E51C42337F2FF655

File PE Metadata

Compilation timestamp:

7/16/2014 11:06:00 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

49152:MYR5PB4ZGL0689SOQlMHdihGYCdc7+d+kJxT497WZbToW7VoTSGAeZIBM4mY/Tq1:MYRX4ZZFS7lMHdnBM4mYuo3Hk

Entry address:

0xC6C0A

Entry point:

E8, 47, BF, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 56, 8B, F1, C6, 46, 0C, 00, 85, C0, 75, 63, E8, C4, 90, 00, 00, 89, 46, 08, 8B, 48, 6C, 89, 0E, 8B, 48, 68, 89, 4E, 04, 8B, 0E, 3B, 0D, 48, 44, 5C, 00, 74, 12, 8B, 0D, FC, 41, 5C, 00, 85, 48, 70, 75, 07, E8, 36, 8E, 00, 00, 89, 06, 8B, 46, 04, 3B, 05, 18, 4A, 5C, 00, 74, 16, 8B, 46, 08, 8B, 0D, FC, 41, 5C, 00, 85, 48, 70, 75, 08, E8, A0, C1, 00, 00, 89, 46, 04, 8B, 46, 08, F6, 40, 70, 02, 75, 14, 83, 48, 70, 02, C6, 46, 0C, 01, EB, 0A... 
[+]

Code size:

979.5 KB (1,003,008 bytes)

Shell Open Command

Open type:

ftp

Command:

"C:\users\{user}\appdata\local\360browser\browser\application\360browser.exe" -- "%1"

The file 360browser.exe has been discovered within the following program.

360 Browser by Qihoo

360 Secure Browser uses the Trident layout engine (as does Internet Explorer) and very difficult to uninstall. Furthermore, whenever a user attempts to install another browser, a warning pop-up claims that the new browser is unsafe.

www.360safe.com/browser.html

26% remove it

Scan 360browser.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.