How to remove A0320812.exe

A0320812.exe

The module A0320812.exe has been detected as Adware.Mobogenie

A0320812.exe
Remove A0320812.exe

File Details

Product Name:

Microsoft® Windows® Operating System
Company Name:

Microsoft Corporation
MD5: 9ea62b6bb5d5eb9bea85bec30a54df82
Size: 83 KB
First Published: 2017-05-21 12:06:07 (6 years ago)
Latest Published: 2023-10-11 23:30:18 (6 months ago)
Status: Adware.Mobogenie (on last analysis)
Analysis Date: 2023-10-11 23:30:18 (6 months ago)

Overview

Signed By: Beijing AmazGame Age Internet Technology Co., Ltd.
Status: Valid

Common Places:

%sysdrive%\system volume information\_restore{e79fa400-b217-4368-9e9f-04f8081b19f1}\rp374
%localappdata%\mobogenie\version\oldversion\mobogenie
%programfiles%\mobogenie
%sysdrive%\windows.old\users\start_travel\appdata\local\mobogenie\version\oldversion\mobogenie
%localappdata%\mobogenie\version\newversion\mobogenie
%profile%\xp\local settings\application data\mobogenie\version\oldversion\mobogenie
%profile%\uido\configuración local\datos de programa\mobogenie\version\oldversion\mobogenie
%sysdrive%\datos\disco_lenovo\users\roberto b\appdata\local\mobogenie\version\oldversion\mobogenie
%profile%\omek\ustawienia lokalne\dane aplikacji\mobogenie\version\oldversion\mobogenie
%profile%\dmin\local settings\application data\mobogenie\version\oldversion\mobogenie

File Names:

A0131129.exe
devcon_x64.exe
A0107866.exe
A0107830.exe
A0002435.exe
A0000648.exe
devcon_x64-0959412a-f907-4a30-a006-902a9e0e1ec1.exe
A0006130.exe
devcon_x64.exe.vir
A0320786.exe
A0320812.exe

Geography:

9.3%
7.4%
6.8%
6.6%
5.9%
5.0%
4.4%
3.7%
3.4%
3.1%
2.5%
2.3%
2.3%
2.3%
2.2%
2.1%
1.6%
1.4%
1.2%
1.2%
1.2%
1.2%
1.2%
1.0%
1.0%
0.9%
0.9%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.7%
0.7%
0.7%
0.7%
0.7%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%

OS Version:

Windows 7 40.2%
Windows 10 36.0%
Windows 8.1 9.8%
Windows XP 9.1%
Windows 8 3.8%
Windows Vista 1.0%
Windows Embedded Standard 0.1%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000100000000
Entry Address: 0x00007310

PE Sections:

Name Size of data MD5
.text 32256 b1580ea334846179ff7819028e711bb5
.data 2048 8221629e97b832ed4ac766d9efae1ec4
.pdata 1024 465dbd90b09eaa725ca2ac8ed6d87400
.rsrc 45056 d4d85d72a8682058d17c83939b100cb3
.reloc 512 745c5ccfd9fce4046c9e6fadee1fa360

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for A0320812.exe
copyright for information about A0320812.exe