home

MobileAccess.exe

Lenovo Mobile Access

Macheen Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘MobileAccess’. This is installed with Lenovo Mobile Access.
Publisher:
Lenovo  (signed by Macheen Inc.)

Product:
Lenovo Mobile Access

Description:
MobileAccess

Version:
3.2.30123.1026

MD5:
e79b1fd0e3449b747443c2ba62d11613

SHA-1:
a7d10621a6bc6ccfb54b967cb5d4c9f569fd26ed

SHA-256:
0f29b852f00e7b81c9584ca4718c9ffb887396bb1e1005d9d1c28a2eb0ba3f66

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 11:50:18 AM UTC  (today)

File size:
152.2 KB (155,864 bytes)

Product version:
3.2.30123.1026

Copyright:
Copyright © Lenovo 2012

Original file name:
MobileAccess.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\lenovo\mobileaccess\mobileaccess.exe

Digital Signature
Signed by:
Macheen Inc.

Authority:
DigiCert Inc

Valid from:
1/31/2012 1:00:00 AM

Valid to:
5/1/2014 2:00:00 PM

Subject:
CN=Macheen Inc., O=Macheen Inc., L=Austin, S=Texas, C=US

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
06702FC408D2988F5C1D8F84451BBCF1

File PE Metadata
Compilation timestamp:
1/23/2013 5:28:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:7VJLmkhmXGmpxemVK11IAnOZfurQ3i3YCebS+m6XG+1/BKvmwhuh5hs+J5ES7/ni:7ejzpJVho2Wr1yh5hRPTn9p/ckC

Entry address:
0x16F5E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
84 KB (86,016 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
MobileAccess

Command:
C:\Program Files\lenovo\mobileaccess\mobileaccess.exe -silentexitifnotfirst


The file MobileAccess.exe has been discovered within the following program.

Lenovo Mobile Access  by Lenovo
Publisher's description - “Have a few sites you always use? Get always-on access just to the sites and apps you need. Choose from the monthly subscriptions below to get what you want, when you want.”
mobile.lenovo.com/welcome.html
4% remove it
 
Powered by Should I Remove It?

Scan MobileAccess.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.