Should I block it?

60%
60% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

cc079 4.00%
be79a 4.00%
6899e 4.00%
e007a 4.00%
5ef83 12.00%
b4d6f 12.00%
b4bb5 4.00%
e6c32 4.00%
04e4d 4.00%
4fb2e 20.00%
dd7cc 4.00%
efbf0 12.00%
aaf6b 4.00%
defb3 4.00%
0a6e5 4.00%
(Note, Beijing AmazGame Age Internet Technology Co. publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegSetValueExW, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, AdjustTokenPrivileges, LookupPrivilegeValueW, OpenProcessToken, OpenSCManagerW, OpenServiceW, QueryServiceStatus, CloseServiceHandle
kernel32.dll
MapViewOfFile, CreateFileMappingW, UnmapViewOfFile, GetLastError, OpenFileMappingW, GetSystemInfo, GetProcAddress, GetModuleHandleW, CreateMutexW, GetSystemDirectoryW, GetModuleFileNameW, WideCharToMultiByte, Process32NextW, Process32FirstW, CreateToolhelp32Snapshot, InitializeCriticalSection, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, CloseHandle, GetVersionExW, Sleep, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, IsProcessorFeaturePresent, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, HeapSetInformation, InterlockedCompareExchange, InterlockedExchange, DecodePointer, EncodePointer, GetSystemTimeAsFileTime, OutputDebugStringA
msvcp100.dll
DllMain
msvcr100.dll
DllMain
ole32.dll
CoCreateGuid
qtcore4.dll
DllMain
shell32.dll
ShellExecuteExW
shlwapi.dll
PathRemoveFileSpecW, PathAddExtensionW
user32.dll
DefWindowProcW, GetWindowLongW, SetWindowLongW, CreateWindowExW, GetDesktopWindow, RegisterClassExW
wininet.dll
InternetCheckConnectionW

daemonprocess.exe

By Beijing AmazGame Age Internet Technology Co. (Signed)

Remove daemonprocess.exe
MD5:   efbf084e2e3034ad1d2c699719ecd4b5
SHA1:   22f68386a23a0857cb2e5051663f8f137c56a41e

Overview

daemonprocess.exe executes as a process with the local user's privileges typically within the context of its parent mgassist.exe (by Beijing AmazGame Age Internet Technology Co). It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This is typically installed with the program Mobogenie published by Beijing Yang Fan Jing He Information Consulting Co. Ltd.. The file is digitally signed by Beijing AmazGame Age Internet Technology Co. which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:daemonprocess.exe
Typical file path:C:\Program Files\mobogenie\daemonprocess.exe
Size:748.69 KB (766,656 bytes)
Build date:1/9/2014 2:59 PM
Certificate
Issued to:Beijing AmazGame Age Internet Technology Co.
Authority (CA):VeriSign
Expiration date:Tuesday, June 16, 2015
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 10.0
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
Mobogenie
 Beijing Yang Fan Jing He Information Consulting Co. Ltd.
  56% remove
Mobogenie is an Android app store portal that may use the OpenCandy, Quick Downloader, Conduit and various other monetization programs to bundle with third party installers. In many cases some versions (mostly older ones) are bundled by third party distribution platforms. The installer and various components is distributed and developed by Beijing AmazGame Age Internet Technology Co., Ltd.

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'mobilegeni daemon' → C:\Program Files\Mobogenie\DaemonProcess.exe
Network connections
  • [TCP] ec2-54-254-184-193.ap-southeast-1.compute.amazonaws.com (54.254.184.193:80)

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.03449586%
    0.028634%
    Kernel CPU:0.01159583%
    0.013761%
    User CPU:0.02290004%
    0.014873%
    Kernel CPU time:203 ms/min
    100,923,805ms/min
    Memory
    Private memory:6.14 MB
    21.59 MB
    Private (maximum):14.64 MB
    Private (minimum):13.33 MB
    Non-paged memory:6.14 MB
    21.59 MB
    Virtual memory:104.08 MB
    140.96 MB
    Virtual memory (peak):107.56 MB
    169.69 MB
    Working set:14.31 MB
    18.61 MB
    Working set (peak):14.95 MB
    37.95 MB
    Page faults:30,798/min
    2,039/min
    I/O
    I/O read transfer:599 Bytes/sec
    1.02 MB/min
    I/O read operations:1/sec
    343/min
    I/O write transfer:0 Bytes/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:170 Bytes/sec
    448.09 KB/min
    I/O other operations:3/sec
    1,671/min
    Resource allocations
    Threads:9
    12
    Handles:334
    600
    GUI GDI count:12
    103
    GUI GDI peak:12
    142
    GUI USER count:23
    49
    GUI USER peak:26
    71

    BehaviorsProcess properties

    Integrety level:Undefined
    Platform:32-bit
    Command line:"C:\Program Files\mobogenie\daemonprocess.exe"
    Owner:User
    Parent processes:

    ResourcesThreads

    Averages
     
    msvcr100.dll (Microsoft Visual Studio 2010 by Microsoft)
    Total CPU:0.10719183%
    0.272967%
    Kernel CPU:0.02796309%
    0.107585%
    User CPU:0.07922874%
    0.165382%
    CPU cycles:2,335,707/sec
    5,741,424/sec
    Context switches:4/sec
    79/sec
    Memory:764 KB
    1.16 MB
    DaemonProcess.exe (main module)
    Total CPU:0.01221124%
    Kernel CPU:0.00773701%
    User CPU:0.00447423%
    CPU cycles:178,562/sec
    Context switches:1/sec
    Memory:756 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Microsoft Windows XP 24.00%
    Windows 7 Home Premium 20.00%
    Windows 8 Pro 16.00%
    Windows 7 Ultimate 12.00%
    Windows 8.1 Enterprise 12.00%
    Windows 8.1 Single Language 4.00%
    Windows 8 Pro with Media Center 4.00%
    Windows 8 Enterprise 4.00%
    Windows 8 Single Language 4.00%

    Distribution by countryDistribution by country

    Malaysia installs about 12.00% of daemonprocess.exe.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Dell 48.28%
    Lenovo 13.79%
    GIGABYTE 10.34%
    ASUS 6.90%
    Compaq 6.90%
    Sony 6.90%
    Hewlett-Packard 3.45%
    Acer 3.45%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE