» browser.exe
Overview
Analysis
File Details
Programs (1)

browser.exe

Co Rom+ Browser

ITIM TECHNOLOGIES COMPANY LIMITED

File name:

browser.exe

Publisher:

Itim Technologies Co., Ltd. (signed by ITIM TECHNOLOGIES COMPANY LIMITED)

Product:

Co Rom+ Browser

Version:

31.0.1650.65

MD5:

7e1cf6189763ac90d8a272648b8db805

SHA-1:

c3ca5b303dc666daa8117a63b17ab2b93abd142a

SHA-256:

684f8ab7388d5eed08383fe1d22baf1c79b55a22d0574de1d607688a8a6ce412

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 12:35:57 AM UTC (today)

File size:

725.9 KB (743,296 bytes)

Product version:

31.0.1650.65

Original file name:

browser.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\coccoc\browser\application\browser.exe

Digital Signature

Signed by:

ITIM TECHNOLOGIES COMPANY LIMITED

Authority:

VeriSign, Inc.

Valid from:

8/15/2013 7:00:00 AM

Valid to:

10/15/2014 6:59:59 AM

Subject:

CN=ITIM TECHNOLOGIES COMPANY LIMITED, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ITIM TECHNOLOGIES COMPANY LIMITED, L=Hanoi, S=Hanoi, C=VN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

73CF60FA0F3669494BA00458C7509E3C

File PE Metadata

Compilation timestamp:

2/20/2014 8:58:40 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

12288:kKJvhJz3FU+hZaUKyuV2ZH6xYvXMWfOwvbyrjmlhL+wjt/AwZY0dRJMYYo23AG2R:kKhpavYvhOwvbyrKNpBdT+o/G2PhH

Entry address:

0x499E2

Entry point:

E8, 7B, B2, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, 4C, 62, 46, 00, 57, FF, 35, 14, 65, 49, 00, FF, D6, FF, 35, 10, 65, 49, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, D1, B2, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 69, 4C, 00, 00, 59, 59, 85, C0, 75, 16, 8D, 43, 10, 3B, C3, 72, 3E, 50, FF, 75, FC, E8... 
[+]

Entropy:

6.4095

Code size:

402.5 KB (412,160 bytes)

The file browser.exe has been discovered within the following program.

Co Rom+ by The Cờ Rôm+ Authors

About 8% of users remove it

Scan browser.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.