home

6ea160ww.exe

Conexant Audio Features

Lenovo(Japan)Ltd.

The program is a setup application that uses the Inno Setup installer.
Publisher:
Lenovo Group Limited   (signed by Lenovo(Japan)Ltd.)

Product:
Conexant Audio Features

Version:
4.92.12.0 (6EA160WW)

MD5:
425adba5f45125c267322ceaf9e3bcb6

SHA-1:
8985a60367233f0c024823d4235db28886fad8d1

SHA-256:
1824e8b73a347174db2dee002b57263801bb695d79df7e84c707b22e284bd244

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 7:54:17 PM UTC  (today)

File size:
15.9 MB (16,622,176 bytes)

Product version:
4.92.12.0 (6EA160WW)

Copyright:
Copyright (C) Lenovo 2008,2010.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\programs\6ea160ww.exe

Digital Signature
Signed by:
Lenovo(Japan)Ltd.

Authority:
VeriSign, Inc.

Valid from:
10/25/2010 2:00:00 AM

Valid to:
10/26/2011 1:59:59 AM

Subject:
CN=Lenovo(Japan)Ltd., OU=Research & Development 2, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Lenovo(Japan)Ltd., L=Yamato-shi, S=Kanagawa, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
59157D6C2EF1B86C254CCACE5ED1534D

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:NTYLcXQfxmTKLqoHOsTTBt9csoDKdzy4qK6Ud3enVErG:NTYLcXQ5LeMT1d+uKV+G

Entry address:
0x9A58

Entry point:
60, 80, CF, E3, 85, CA, F2, 73, 01, F3, C7, C6, 30, 98, DB, 76, C6, C2, BE, 8B, F1, 0F, AF, F6, 86, D8, 81, E9, CF, 6D, 00, 00, 89, FD, 8D, 1D, 98, 4D, 21, FD, 0F, BE, FE, 81, C1, 73, 0B, 00, 00, F7, C5, B3, 98, B1, AC, 0F, BF, EE, 8B, F0, F2, 31, D7, FE, C7, 73, 02, 88, E7, 0F, BF, FB, 22, DA, B7, 86, E8, 00, 00, 00, 00, C6, C2, B8, 4E, 39, F2, 85, F6, 70, 0B, 0F, AF, C1, 69, FB, ED, CB, 6A, 10, 8A, E5, 81, F9, 01, D5, 00, 00, 5A, F6, C3, 50, F6, C3, DD, 68, 70, 82, 87, 00, 72, 08, 8D, 35, E9, A3, 42, 63...
 
[+]

Entropy:
7.9999  (probably packed)

Code size:
36.5 KB (37,376 bytes)

Scan 6ea160ww.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.