home

MobileAccess.exe

Lenovo Mobile Access

Macheen Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘MobileAccess’. This is installed with Lenovo Mobile Access.
Publisher:
Lenovo  (signed by Macheen Inc.)

Product:
Lenovo Mobile Access

Description:
MobileAccess

Version:
3.1.0.1262

MD5:
2c8bc9a7e889ccc34ad2f8acddd4f114

SHA-1:
06fd776f2c67afcd8de0d54aa59fe6453e3b18e8

SHA-256:
58f7607d3521f467cf5a02b063c204aaa9fbdc6dda21368212d081e6902159d7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 12:48:45 AM UTC  (today)

File size:
151.7 KB (155,384 bytes)

Product version:
3.1.0.1262

Copyright:
Copyright © Lenovo 2012

Original file name:
MobileAccess.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\lenovo\mobileaccess\mobileaccess.exe

Digital Signature
Signed by:
Macheen Inc.

Authority:
DigiCert Inc

Valid from:
1/31/2012 2:00:00 AM

Valid to:
5/1/2014 3:00:00 PM

Subject:
CN=Macheen Inc., O=Macheen Inc., L=Austin, S=Texas, C=US

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
06702FC408D2988F5C1D8F84451BBCF1

File PE Metadata
Compilation timestamp:
5/3/2012 7:59:30 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:79ULmkhmXGmpxemVI11IAnOZfurQ3i3YCebS+m6XG+1/BKvmw7Sh5E8+J5ES7/nM:7LjzpJVDo2Wr1Mh5EBPTn9p/cks

Entry address:
0x16F2E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.3149

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
84 KB (86,016 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
MobileAccess

Command:
C:\Program Files\lenovo\mobileaccess\mobileaccess.exe -silentexitifnotfirst


The file MobileAccess.exe has been discovered within the following program.

Lenovo Mobile Access  by Lenovo
Publisher's description - “Have a few sites you always use? Get always-on access just to the sites and apps you need. Choose from the monthly subscriptions below to get what you want, when you want.”
mobile.lenovo.com/welcome.html
4% remove it
 
Powered by Should I Remove It?

Scan MobileAccess.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.