home

360is_4.9.0.4902.exe

360 Internet Security

QIHU 360 SOFTWARE CO. LIMITED

This is a setup program which is used to install the application. This is installed with 360 Internet Security. The file has been seen being downloaded from int.down.360safe.com.
Publisher:
Qihu 360 Software Co., Ltd.  (signed by QIHU 360 SOFTWARE CO. LIMITED)

Product:
360 Internet Security

Version:
4,9,0,4929

MD5:
8cc8c066deb8a6272a5dd897fcc79656

SHA-1:
6cee0371a7ddd2374a2fc4b799404d52c97ee399

SHA-256:
93b874d0c2f7d437d0656cd914646fe583683a8e83f09f4eb32b721e81b6a703

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 12:18:25 AM UTC  (today)

File size:
159 MB (166,715,240 bytes)

Product version:
4,9,0,4902

Copyright:
(C) 2013 Qihu 360 Software Co., Ltd.

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\360is_4.9.0.4902.exe

Digital Signature
Signed by:
QIHU 360 SOFTWARE CO. LIMITED

Authority:
Symantec Corporation

Valid from:
5/21/2013 2:00:00 AM

Valid to:
5/21/2016 1:59:59 AM

Subject:
CN=QIHU 360 SOFTWARE CO. LIMITED, O=QIHU 360 SOFTWARE CO. LIMITED, L=Hong Kong, S=Hong Kong, C=HK, SERIALNUMBER=1848744, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.3=HK

Issuer:
CN=Symantec Class 3 Extended Validation Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
541FDA68B5E95006F2FEC51BEA326365

File PE Metadata
Compilation timestamp:
5/22/2014 5:28:33 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3145728:r/0hEBmj3/OmCMkzG2SGBpHovjvcPYy8eahVumCiDCiTqP:I1bWfDRl6jvcPRgrumC4Tq

Entry address:
0x2E65B

Entry point:
E8, 9B, 00, 01, 00, E9, 79, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 83, 3D, A0, 5C, 49, 00, 00, 0F, 84, D8, 03, 01, 00, 83, EC, 08, 0F, AE, 5C, 24, 04, 8B, 44, 24, 04, 25, 80, 1F, 00, 00, 3D, 80, 1F, 00, 00, 75, 0F, D9, 3C, 24, 66, 8B, 04, 24, 66, 83, E0, 7F, 66, 83, F8, 7F, 8D, 64, 24, 08, 0F, 85, A7, 03, 01, 00, EB, 00, F3, 0F, 7E, 44, 24, 04, 66, 0F, 28, 15, 50, 99, 47, 00, 66, 0F, 28, C8, 66, 0F, 28, F8, 66, 0F, 73, D0, 34, 66, 0F, 7E, C0, 66, 0F, 54, 05, 70, 99, 47, 00, 66, 0F, FA, D0...
 
[+]

Code size:
462 KB (473,088 bytes)

The file 360is_4.9.0.4902.exe has been discovered within the following program.

360 Internet Security  by Qihu 360 Software Co., Ltd.
Publisher's description - “360 Internet Security works proactively to alert you when suspicious programs try to access critical system resources like system settings and registries, startup programs, and system directories. Secure browsing and privacy protection are vital.”
www.360safe.com
8% remove it
 
Powered by Should I Remove It?

The file 360is_4.9.0.4902.exe has been seen being distributed by the following URL.

http://int.down.360safe.com/.../360is_4.9.0.4902.exe

Scan 360is_4.9.0.4902.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.