How to remove aapt.exe
aapt.exe
The module aapt.exe has been detected as Adware.Mobogenie
File Details
| MD5: | c137bc8e4a046b9405f3063b76183fd2 |
| Size: | 832 KB |
| First Published: | 2017-05-21 12:06:07 (7 years ago) |
| Latest Published: | 2024-10-12 23:07:10 (6 months ago) |
| Status: | Adware.Mobogenie (on last analysis) | |
| Analysis Date: | 2024-10-12 23:07:10 (6 months ago) |
Overview
| Signed By: | Beijing AmazGame Age Internet Technology Co., Ltd. |
| Status: | Valid |
Common Places:
| %sysdrive%\system volume information\_restore{e79fa400-b217-4368-9e9f-04f8081b19f1}\rp374 |
| %localappdata%\mobogenie\version\oldversion\mobogenie |
| %programfiles%\mobogenie |
| %sysdrive%\windows.old\users\start_travel\appdata\local\mobogenie\version\oldversion\mobogenie |
| %localappdata%\mobogenie\version\newversion\mobogenie |
| %profile%\xp\local settings\application data\mobogenie\version\oldversion\mobogenie |
| %profile%\uido\configuración local\datos de programa\mobogenie\version\oldversion\mobogenie |
| %sysdrive%\datos\disco_lenovo\users\roberto b\appdata\local\mobogenie\version\oldversion\mobogenie |
| %profile%\omek\ustawienia lokalne\dane aplikacji\mobogenie\version\oldversion\mobogenie |
| %profile%\dmin\local settings\application data\mobogenie\version\oldversion\mobogenie |
File Names:
| A0131121.exe |
| aapt.exe |
| A0107859.exe |
| A0107823.exe |
| A0002427.exe |
| A0000630.exe |
| aapt-2b083f32-3a8e-46c5-ad8e-9a4c16363469.exe |
| A0018795.exe |
| aapt.exe.vir |
| A0320810.exe |
| A0320784.exe |
Geography:
| Russia | 8.9% | |
| Brazil | 7.6% | |
| Vietnam | 7.0% | |
| Turkey | 6.1% | |
| Thailand | 6.1% | |
| Indonesia | 4.9% | |
| Poland | 4.3% | |
| Taiwan | 3.7% | |
| Ukraine | 3.4% | |
| Japan | 3.2% | |
| India | 2.9% | |
| United States | 2.5% | |
| Argentina | 2.5% | |
| Mexico | 2.2% | |
| Italy | 2.2% | |
| Canada | 2.1% | |
| Spain | 1.7% | |
| Hong Kong | 1.2% | |
| Saudi Arabia | 1.2% | |
| United Kingdom | 1.2% | |
| South Korea | 1.2% | |
| Portugal | 1.2% | |
| Venezuela | 1.2% | |
| Egypt | 1.1% | |
| Romania | 0.9% | |
| Serbia | 0.9% | |
| Latvia | 0.9% | |
| Chile | 0.8% | |
| Kazakhstan | 0.8% | |
| Malaysia | 0.8% | |
| Netherlands | 0.8% | |
| Paraguay | 0.8% | |
| Colombia | 0.7% | |
| Czech Republic | 0.7% | |
| France | 0.7% | |
| Israel | 0.7% | |
| Bulgaria | 0.7% | |
| Peru | 0.7% | |
| Australia | 0.5% | |
| Uruguay | 0.5% | |
| Iran | 0.5% | |
| Jordan | 0.5% | |
| Germany | 0.5% | |
| Philippines | 0.5% | |
| Finland | 0.4% | |
| Algeria | 0.4% | |
| Bolivia | 0.4% | |
| Hungary | 0.4% | |
| Pakistan | 0.4% | |
| Iraq | 0.4% | |
| Estonia | 0.3% | |
| Bosnia and Herzegovina | 0.3% | |
| Denmark | 0.3% | |
| Switzerland | 0.3% | |
| Sweden | 0.3% | |
| Myanmar | 0.3% | |
| Uzbekistan | 0.3% | |
| Puerto Rico | 0.3% | |
| New Zealand | 0.3% | |
| Greece | 0.3% | |
| Ecuador | 0.3% | |
| Sri Lanka | 0.3% | |
| Belgium | 0.1% | |
| Slovakia | 0.1% | |
| Dominican Republic | 0.1% | |
| Honduras | 0.1% | |
| Lebanon | 0.1% | |
| Croatia | 0.1% | |
| United Arab Emirates | 0.1% | |
| Belarus | 0.1% | |
| Qatar | 0.1% |
OS Version:
| Windows 7 | 41.9% | |
| Windows 10 | 35.1% | |
| Windows 8.1 | 9.9% | |
| Windows XP | 8.4% | |
| Windows 8 | 3.5% | |
| Windows Vista | 1.0% | |
| Windows Embedded Standard | 0.1% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00001130 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 693248 | c522d1fb6e0064a53fb243e5d60ecfe3 |
| .data | 19968 | 04947d75545f83ed5e750ff8b2ba4edd |
| .rdata | 130560 | 070987b94aef000205237eabf247c87a |
| .bss | 0 | 00000000000000000000000000000000 |
| .idata | 3584 | 026fbf909e44c5c43ab80de65e60bb92 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for aapt.exe
