home

browser.exe

CocCoc

COC COC COMPANY LIMITED

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘CocCoc’.
Publisher:
Coc Coc Co., Ltd.  (signed by COC COC COMPANY LIMITED)

Product:
CocCoc

Version:
55.4.2883.114

MD5:
47bbeb319125719261725fe8dda71e06

SHA-1:
cf14e44389523c3f7f79f8775a80ac98bd5d4b6b

SHA-256:
b11b20924cdb0cac058fcf912ac4b8e6b98925593d657f2580ca77c9b9c0a12c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 5:17:57 AM UTC  (today)

File size:
863.3 KB (884,048 bytes)

Product version:
55.4.2883.114

Copyright:
Copyright (C) 2012-2016 Coc Coc Co., Ltd. All Rights Reserved.

Original file name:
browser.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\coccoc\browser\application\browser.exe

Digital Signature
Signed by:
COC COC COMPANY LIMITED

Authority:
GlobalSign nv-sa

Valid from:
1/13/2017 6:37:10 PM

Valid to:
3/8/2019 4:33:13 PM

Subject:
E=admins@coccoc.vn, CN=COC COC COMPANY LIMITED, OU=IT Department, O=COC COC COMPANY LIMITED, L=Hanoi, S=Hanoi, C=VN

Issuer:
CN=GlobalSign CodeSigning CA - G3, O=GlobalSign nv-sa, C=BE

Serial number:
69B9628894F9E025147DB717

File PE Metadata
Compilation timestamp:
2/23/2017 3:16:04 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

Entry address:
0x4F732

Entry point:
E8, E7, 08, 00, 00, E9, 80, FE, FF, FF, 55, 8B, EC, 6A, 00, FF, 15, D4, F1, 48, 00, FF, 75, 08, FF, 15, 64, F3, 48, 00, 68, 09, 04, 00, C0, FF, 15, B4, F0, 48, 00, 50, FF, 15, 3C, F1, 48, 00, 5D, C3, 55, 8B, EC, 81, EC, 24, 03, 00, 00, 6A, 17, E8, FC, 9D, 03, 00, 85, C0, 74, 05, 6A, 02, 59, CD, 29, A3, 30, D3, 4B, 00, 89, 0D, 2C, D3, 4B, 00, 89, 15, 28, D3, 4B, 00, 89, 1D, 24, D3, 4B, 00, 89, 35, 20, D3, 4B, 00, 89, 3D, 1C, D3, 4B, 00, 66, 8C, 15, 48, D3, 4B, 00, 66, 8C, 0D, 3C, D3, 4B, 00, 66, 8C, 1D, 18...
 
[+]

Entropy:
6.4611

Code size:
564.5 KB (578,048 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CocCoc

Command:
"C:\users\{user}\appdata\local\coccoc\browser\application\browser.exe" --auto-launch-at-startup


Scan browser.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.