Should I block it?

No, this file is 100% safe to run.

Additional versions

5, 7, 0, 1026	22.73%
5, 7, 0, 1018	4.55%
5, 7, 0, 1016	13.64%
5, 6, 0, 1040	13.64%
5, 6, 0, 1040	18.18%
5, 6, 0, 1040	4.55%
5, 6, 0, 1040	4.55%
5, 6, 0, 1032	18.18%

Relationships

Parent processes

Related files

PE file structure

Show functions

Import table

comctl32.dll

ImageList_Create, ImageList_ReplaceIcon, PropertySheetA, CreatePropertySheetPageA, InitCommonControlsEx

gdi32.dll

SelectClipRgn, GetClipRgn, CreateRectRgn, PaintRgn, CombineRgn, PathToRegion, WidenPath, DeleteObject, StrokeAndFillPath, CreatePen, SelectObject, CreateSolidBrush, GetObjectA, CreateFontW, GetDeviceCaps, FillPath, GetTextExtentPoint32W, CreateRectRgnIndirect, SetBkColor, SetTextColor, GetTextColor, GetTextExtentPoint32A, SetBkMode, StrokePath, BitBlt, GetStockObject, CreateCompatibleBitmap, CreateCompatibleDC, GetDIBits, CreateDIBSection, CreateFontIndirectW, GetObjectW, SetBrushOrgEx, CreatePatternBrush, StretchBlt, ExtCreateRegion, CreateICA, ExcludeClipRect, CreateFontIndirectA, SetWindowOrgEx, SetViewportOrgEx, ModifyWorldTransform, SetBitmapBits, GetBitmapBits, ExtTextOutA, CreateFontA, SetGraphicsMode, BeginPath, Rectangle, EndPath, MoveToEx, DeleteDC, LineTo, AngleArc

iphlpapi.dll

GetAdaptersInfo

kernel32.dll

DllMain

msimg32.dll

GradientFill, TransparentBlt, AlphaBlend

netapi32.dll

NetApiBufferFree, NetUseEnum

ole32.dll

StgCreateDocfile, StgCreateStorageEx, StgIsStorageFile, OleUninitialize, CoInitializeEx, CoInitializeSecurity, CoSetProxyBlanket, CoTaskMemFree, StgOpenStorage, StgOpenStorageEx, OleInitialize, CoCreateGuid, StringFromGUID2, CoInitialize, CoCreateInstance, CoUninitialize

psapi.dll

GetProcessMemoryInfo

rpcrt4.dll

RpcStringFreeA, UuidToStringA, UuidCreate, UuidFromStringA

secur32.dll

GetUserNameExW

shell32.dll

Shell_NotifyIconA, ShellExecuteA, SHGetSpecialFolderLocation, SHBrowseForFolderA, ShellExecuteW, SHGetFileInfoW, SHGetSpecialFolderPathW, ShellExecuteExA, SHChangeNotify, SHGetSpecialFolderPathA, SHGetMalloc, SHGetPathFromIDListA

shlwapi.dll

PathGetArgsA, PathRemoveArgsA, PathUnquoteSpacesA, StrStrIA, PathRemoveBlanksA, StrCpyW, PathFindFileNameA, PathAppendA, SHCopyKeyW, SHCopyKeyA, SHDeleteValueW, SHDeleteValueA, SHDeleteKeyW, SHDeleteKeyA, SHSetValueW, SHSetValueA, SHGetValueW, SHGetValueA, PathIsDirectoryW, PathIsDirectoryA, PathFileExistsW, PathFileExistsA, PathRemoveFileSpecA, PathAddBackslashA, PathAddBackslashW, PathQuoteSpacesW, PathAppendW, PathFindFileNameW, PathFindNextComponentW, PathRemoveFileSpecW, PathFindNextComponentA, PathGetDriveNumberA, PathRemoveBackslashA, PathCompactPathW, StrChrA, PathStripToRootA, PathIsNetworkPathA, PathFindExtensionA, StrStrA, UrlUnescapeA, StrCmpNA, PathIsFileSpecA, PathAddExtensionA, PathRemoveExtensionA, PathSetDlgItemPathA, StrCmpNIA, PathQuoteSpacesA

user32.dll

DllMain

version.dll

VerQueryValueA, GetFileVersionInfoW, GetFileVersionInfoA, GetFileVersionInfoSizeW, GetFileVersionInfoSizeA

winhttp.dll

WinHttpOpen, WinHttpGetProxyForUrl, WinHttpCloseHandle, WinHttpConnect, WinHttpReadData, WinHttpGetIEProxyConfigForCurrentUser, WinHttpQueryDataAvailable, WinHttpQueryHeaders, WinHttpReceiveResponse, WinHttpSendRequest, WinHttpAddRequestHeaders, WinHttpSetOption, WinHttpOpenRequest

wininet.dll

InternetCrackUrlA, InternetCloseHandle, InternetOpenA, DeleteUrlCacheEntry, FindCloseUrlCache, FindNextUrlCacheEntryA, FindFirstUrlCacheEntryA, InternetConnectA, InternetReadFile, HttpSendRequestA, HttpOpenRequestA, InternetQueryDataAvailable, HttpQueryInfoA, InternetGetCookieA, InternetOpenUrlA

winmm.dll

timeGetTime, PlaySoundA

ws2_32.dll

WSCInstallProvider

SUPERAntiSpyware.exe

SUPERAntiSpyware by SUPERAntiSpyware.com (Signed)

Remove SUPERAntiSpyware.exe

Version:	5, 6, 0, 1040
MD5:	05c8dd8f81fd999625256eddb42a8162
SHA1:	98cad8d1b99c2eed481634d8e6b2535f92f3c6ae
SHA256:	fc7675f505530ea0fbbb3e844cbce5afd9905151d63689f70d60cb0de6827887

Overview

superantispyware.exe executes as a process with the local user's privileges typically within the context of its parent 360amigo.exe (360Amigo System Speedup by 360Amigo Oy). It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). It is installed with a couple of know programs including SUPERAntiSpyware published by SUPERAntiSpyware.com, SUPERAntiSpyware from SUPERAntiSpyware.com and SUPERAntiSpyware by SUPERAntiSpyware.com.

Details

File name:	superantispyware.exe
Publisher:	SUPERAntiSpyware
Product name:	SUPERAntiSpyware
Description:	SUPERAntiSpyware Application
Typical file path:	C:\Program Files\superantispyware\superantispyware.exe
File version:	5, 6, 0, 1040
Size:	6.28 MB (6,588,144 bytes)
Build date:	10/2/2013 12:55 PM
Certificate
Issued to:	SUPERAntiSpyware.com
Authority (CA):	GoDaddy.com
Effective date:	Monday, May 6, 2013
Expiration date:	Wednesday, May 6, 2015
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

SUPERAntiSpyware

SUPERAntiSpyware.com

25% remove

SUPERAntiSpyware is a software application distributed as shareware which can detect and remove spyware, adware, trojan horses, rogue security software, computer worms, rootkits, parasites and other potentially harmful software applications. Although it can detect malware, SUPERAntiSpyware is not designed to replace antivirus software. The product is available as freeware for personal use with limited functions, such as no automatic upd...

Behaviors

Startup files (user) run

Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'SUPERAntiSpyware' → C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00037651%	0.028634%
Kernel CPU:	0.00016400%	0.013761%
User CPU:	0.00021252%	0.014873%
Kernel CPU time:	1,345,654 ms/min	100,923,805ms/min
CPU cycles:	13,183,482/sec	17,470,203/sec
Memory
Private memory:	249.5 MB	21.59 MB
Private (maximum):	58.82 MB
Private (minimum):	597.33 KB
Non-paged memory:	249.5 MB	21.59 MB
Virtual memory:	803.65 MB	140.96 MB
Virtual memory (peak):	1.03 GB	169.69 MB
Working set:	39.8 MB	18.61 MB
Working set (peak):	151.77 MB	37.95 MB
Page faults:	5,790,963/min	2,039/min
I/O
I/O read transfer:	675.54 KB/sec	1.02 MB/min
I/O read operations:	14/sec	343/min
I/O write transfer:	56.34 KB/sec	274.99 KB/min
I/O write operations:	2/sec	227/min
I/O other transfer:	17.24 KB/sec	448.09 KB/min
I/O other operations:	380/sec	1,671/min
Resource allocations
Threads:	21	12
Handles:	486	600
GUI GDI count:	141	103
GUI GDI peak:	149	142
GUI USER count:	109	49
GUI USER peak:	118	71

Process properties

Integrety level:	High
Platform:	64-bit
Command lines:	"C:\Program Files\superantispyware\superantispyware.exe" "C:\Program Files\superantispyware\superantispyware.exe" /updateresultC:""
Owner:	User
Parent processes:	360amigo.exe (360Amigo System Speedup by 360Amigo Oy) explorer.exe (Windows Explorer by Microsoft Corporation)

Threads

Averages

SUPERAntiSpyware.exe (main module)
Total CPU:	2.41035639%	0.272967%
Kernel CPU:	0.93880730%	0.107585%
User CPU:	1.47154909%	0.165382%
CPU cycles:	62,518,849/sec	5,741,424/sec
Context switches:	49/sec	79/sec
Memory:	134.63 MB	1.16 MB
ntdll.dll
Total CPU:	0.00636896%
Kernel CPU:	0.00635686%
User CPU:	0.00001209%
CPU cycles:	12,596/sec
Memory:	1.66 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Microsoft Windows XP	27.27%
Windows 8.1	18.18%
Windows 7 Ultimate	18.18%
Windows 7 Home Premium	18.18%
Windows 8	9.09%
Windows 8.1 Pro with Media Center	4.55%
Windows Vista Home Premium	4.55%

Distribution by country

United States installs about 77.27% of SUPERAntiSpyware.

Distribution by PC manufacturer

PC Manufacturer	distribution
ASUS	27.59%
Sony	20.69%
Acer	17.24%
Lenovo	13.79%
American Megatrends	10.34%
Dell	6.90%
GIGABYTE	3.45%

Remove Adware and Spyware Programs, FREE Download!