home

360Amigo.exe

360Amigo System Speedup

Business Bakers

The application 360Amigo.exe by Business Bakers has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘360Amigo’. This file is typically installed with the program 360Amigo System Speedup PRO by 360Amigo.
Publisher:
360Amigo  (signed by Business Bakers)

Product:
360Amigo System Speedup

Version:
1.2.1.7900

MD5:
8d5ef88621ae41519f8a0edf5b616815

SHA-1:
fd58bdb3f0153a0fc77e41637c5c53a95609730d

SHA-256:
43d0fd1dbe0666bb0c2bc26f21da4570b0c5f6e948cc1e1cc124f039750cc05f

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/25/2024 5:49:41 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Optional.Startup.I
14.5.13.11

File size:
5.1 MB (5,297,952 bytes)

Product version:
1.2.1

Copyright:
Copyright(c) 2012 by 360Amigo

Trademarks:
360Amigo

Original file name:
360Amigo.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\360amigo\360amigo.exe

Digital Signature
Signed by:
Business Bakers

Authority:
VeriSign, Inc.

Valid from:
8/17/2011 2:00:00 AM

Valid to:
8/17/2012 1:59:59 AM

Subject:
CN=Business Bakers, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Business Bakers, L=Helsinki, S=Helsinki, C=FI

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
08FFDE64490119842E1D0271FB0FE97A

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:0PVIX6E6LzEQzTky8zSwCW3qcc5kP+2gIcPxvik9SU7HWYXxMBkusrdLT3jTPJkj:0aX6RLXVtUqOcPxviISUC5xbaor3/+q

Entry address:
0x33E778

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 88, DE, 73, 00, E8, 43, 8C, CC, FF, B8, 9C, E9, 73, 00, E8, A1, B7, D6, FF, E8, 14, F5, FF, FF, E8, B3, F5, FF, FF, E8, 56, B0, D6, FF, 84, C0, 75, 34, BA, B8, E9, 73, 00, B1, 01, B8, E0, E9, 73, 00, E8, A5, 26, CD, FF, 84, C0, 74, 0E, A1, 44, 5E, 75, 00, 8B, 00, E8, 6D, B7, D6, FF, EB, 11, A1, 44, 5E, 75, 00, 8B, 00, E8, 9F, B6, D6, FF, E8, 4A, 61, CC, FF, B8, F0, E9, 73, 00, E8, 50, B7, D6, FF, B8, E0, E9, 73, 00, BA, B8, E9, 73, 00, B1, 01, E8, 67, 26, CD, FF, 84, C0, 74...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
3.2 MB (3,398,656 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
360Amigo

Command:
"C:\Program Files\360amigo\360amigo.exe" -autorun


The file 360Amigo.exe has been discovered within the following program.

360Amigo System Speedup PRO  by 360Amigo
360Amigo System Speedup is a tool of Windows that works quickly in identifying the problem and fix it if there are some mistakes that result in slow system performance.
www.360amigo.com
56% remove it
 
Powered by Should I Remove It?

Remove 360Amigo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.