home

360is_5.0.0.5104f.exe

360 Internet Security

QIHU 360 SOFTWARE CO. LIMITED

This is a setup program which is used to install the application. This is installed with 360 Internet Security. The file has been seen being downloaded from dl.cdn.chip.de and multiple other hosts.
Publisher:
Qihu 360 Software Co., Ltd.  (signed by QIHU 360 SOFTWARE CO. LIMITED)

Product:
360 Internet Security

Version:
5,0,0,5110

MD5:
9a52b7d4790c0de3d4bb5ac6baf8ae53

SHA-1:
1f814738afa2e691bf8f5a1d98240cca08c13a44

SHA-256:
752d40b7fb0aea0c01d3b78b31bbd424cd8d15e809844087250596e8024a22b5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/4/2024 1:26:58 AM UTC  (today)

File size:
173.7 MB (182,184,296 bytes)

Product version:
5,0,0,5104

Copyright:
(C) 2013 Qihu 360 Software Co., Ltd.

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\360is_5.0.0.5104f.exe

Digital Signature
Signed by:
QIHU 360 SOFTWARE CO. LIMITED

Authority:
Symantec Corporation

Valid from:
5/21/2013 2:00:00 AM

Valid to:
5/21/2016 1:59:59 AM

Subject:
CN=QIHU 360 SOFTWARE CO. LIMITED, O=QIHU 360 SOFTWARE CO. LIMITED, L=Hong Kong, S=Hong Kong, C=HK, SERIALNUMBER=1848744, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.3=HK

Issuer:
CN=Symantec Class 3 Extended Validation Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
541FDA68B5E95006F2FEC51BEA326365

File PE Metadata
Compilation timestamp:
11/20/2014 3:52:15 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3145728:cHuhkG4RyvJYe8FFhcugx82zzlOmtkvuhiXTxsyRPV3KceGEsnMhjU:cHuhFkyvH8FFYzzlOkkvTbRIwXnM

Entry address:
0x2E66B

Entry point:
E8, 9B, 00, 01, 00, E9, 79, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 83, 3D, C0, 5C, 49, 00, 00, 0F, 84, D8, 03, 01, 00, 83, EC, 08, 0F, AE, 5C, 24, 04, 8B, 44, 24, 04, 25, 80, 1F, 00, 00, 3D, 80, 1F, 00, 00, 75, 0F, D9, 3C, 24, 66, 8B, 04, 24, 66, 83, E0, 7F, 66, 83, F8, 7F, 8D, 64, 24, 08, 0F, 85, A7, 03, 01, 00, EB, 00, F3, 0F, 7E, 44, 24, 04, 66, 0F, 28, 15, 50, 99, 47, 00, 66, 0F, 28, C8, 66, 0F, 28, F8, 66, 0F, 73, D0, 34, 66, 0F, 7E, C0, 66, 0F, 54, 05, 70, 99, 47, 00, 66, 0F, FA, D0...
 
[+]

Code size:
462.5 KB (473,600 bytes)

The file 360is_5.0.0.5104f.exe has been discovered within the following program.

360 Internet Security  by Qihu 360 Software Co., Ltd.
Publisher's description - “360 Internet Security works proactively to alert you when suspicious programs try to access critical system resources like system settings and registries, startup programs, and system directories. Secure browsing and privacy protection are vital.”
www.360safe.com
8% remove it
 
Powered by Should I Remove It?

The file 360is_5.0.0.5104f.exe has been seen being distributed by the following 2 URLs.

http://dl.cdn.chip.de/downloads/.../360is_5.0.0.5104F.exe

http://int.down.360safe.com/.../360is_5.0.0.5104F.exe

Scan 360is_5.0.0.5104f.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.