» a0002713.exe
Overview
Analysis
File Details

a0002713.exe

360Amigo System SpeedUp

Business Bakers

The application a0002713.exe by Business Bakers has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.

File name:

a0002713.exe

Publisher:

SystemAmigo (signed by Business Bakers)

Product:

360Amigo System SpeedUp

Version:

1.2.1.5500

MD5:

266be2d3ddf1eb6b178435a10a0c3031

SHA-1:

5618f5e246b0f05041faf63f2a792bbd09a59e42

SHA-256:

ac9a5cb885fdd84674392b12ac2f7e68bf9624098182f4becfdcf911dcb21006

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/17/2024 7:34:28 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Win32.Generic

16.8.13.22

File size:

3 MB (3,126,344 bytes)

Product version:

1.2

Trademarks:

SystemAmigo

Original file name:

Setup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Business Bakers

Authority:

VeriSign, Inc.

Valid from:

7/29/2010 8:00:00 PM

Valid to:

7/30/2011 7:59:59 PM

Subject:

CN=Business Bakers, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Business Bakers, L=Helsinki, S=Helsinki, C=FI

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

71346AFF5AC5D072DC31F7DC3A872308

File PE Metadata

Compilation timestamp:

6/19/1992 6:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:Nxx9ZSVkKf87nIon31565mHYUfs6qk2ZtJ+915XD7ALkA0RSmdi4UMBumV2vKi7h:LxuF+Io31D3etJ+TxD8LkAGroM1wvKi1

Entry address:

0x887001

Entry point:

60, E9, 3D, 04, 00, 00, 41, 3A, 54, CB, 59, 00, 51, 86, 89, 4E, 94, CB, 5C, F2, 7B, 68, 29, 55, 94, CB, DC, D2, 4C, 15, 9D, 15, 50, 54, F6, 11, 9A, 0F, 59, 24, D5, 31, 5C, 15, 50, 92, DE, 48, 89, 0F, 59, 15, 50, CB, 59, A2, D5, CF, A3, 59, 50, 1B, 58, AB, 50, 16, 9D, 15, D9, 50, 59, 5F, 94, CB, E4, 0D, DE, 68, 6A, 5F, 94, CB, AC, 65, 4F, 61, 55, 60, 94, CB, E2, 9A, 4C, 0B, 9D, 15, DD, 68, 77, 5F, 94, CB, AC, 6C, 4F, 61, 55, 60, 94, CB, E2, 9A, 50, 0B, 9D, 15, DD, 50, 0E, 4F, 94, CB, 58, F6, 70, A9, 6B, 15... 
[+]

Packer / compiler:

ASPack v2.11

Code size:

1.2 MB (1,233,408 bytes)

Remove a0002713.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.