» uninstall.exe
Overview
Analysis
File Details
Programs (1)
Downloads (1)

uninstall.exe

360Amigo System SpeedUp

Business Bakers

The application uninstall.exe, “360Amigo System SpeedUp Installor” by Business Bakers has been detected as a potentially unwanted program by 2 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. This file is typically installed with the program 360Amigo System Speedup PRO by 360Amigo. The file has been seen being downloaded from www.360amigo.com.

File name:

uninstall.exe

Publisher:

360Amigo (signed by Business Bakers)

Product:

360Amigo System SpeedUp

Description:

360Amigo System SpeedUp Installor

Version:

1.2.1.8000

MD5:

38114990f4aa9c4a6e1173ff5226049d

SHA-1:

ab5775bba5a71dee0cd5bb1c8ae997a61e75fc7f

SHA-256:

285a83ba23d349ed362cccc5cac6fb312479ec1da61c30680d3bec0e05005f89

Scanner detections:

2 / 68

Status:

Potentially unwanted

Analysis date:

12/25/2024 6:27:23 PM UTC (today)

Scan engine

Detection

Engine version

ESET NOD32

Win32/360Amigo (variant)

8.9248

Reason Heuristics

PUP.Optional.Installer.BusinessBakers.J

14.2.21.19

File size:

3.1 MB (3,288,864 bytes)

Product version:

1.2.1

Trademarks:

360Amigo

Original file name:

Setup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United Kingdom)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\uninstall.exe

Digital Signature

Signed by:

Business Bakers

Authority:

VeriSign, Inc.

Valid from:

8/17/2011 2:00:00 AM

Valid to:

8/17/2012 1:59:59 AM

Subject:

CN=Business Bakers, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Business Bakers, L=Helsinki, S=Helsinki, C=FI

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

08FFDE64490119842E1D0271FB0FE97A

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:GGyV0nU34l5ZKcsfzuP5UdDX1/Lm5ir0xUz7UT7S1+ebH6PiI/m+/3:ByUUolytaxUVFeiYxEkAbH6PDBf

Entry address:

0xA0D001

Entry point:

60, E9, 3D, 04, 00, 00, E9, 25, 05, 01, 01, EC, 01, BC, 31, 3A, 45, 01, 04, DE, 2C, 9E, D1, 40, 45, 01, 84, BE, FD, 4A, 45, 01, 01, 8A, 9E, FD, 4A, 45, 01, 10, 86, 67, 04, 01, 01, C8, 86, 34, 3A, 45, 01, 01, 01, 01, 01, 8E, 86, 05, 4B, 45, 01, 51, 00, 96, 01, 4C, 45, 01, 8A, 86, 01, 4B, 45, 01, 8C, F9, 8E, 9E, 12, 4B, 45, 01, 54, 51, 00, 96, FD, 4B, 45, 01, 8A, 86, FD, 40, 45, 01, 8E, 9E, 1F, 4B, 45, 01, 54, 58, 00, 96, FD, 4B, 45, 01, 8A, 86, 01, 41, 45, 01, 8E, 86, B6, 3A, 45, 01, 00, E1, A1, F0, 13, 01... 
[+]

Packer / compiler:

ASProtect v1.1

Code size:

1.2 MB (1,238,528 bytes)

The file uninstall.exe has been discovered within the following programs.

360Amigo System Speedup PRO by 360Amigo

360Amigo System Speedup is a tool of Windows that works quickly in identifying the problem and fix it if there are some mistakes that result in slow system performance.

www.360amigo.com

56% remove it

The file uninstall.exe has been seen being distributed by the following URL.

http://www.360amigo.com/.../360amigoprosetup.exe

Remove uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.