home

Energy Manager.exe

Energy Manager

Lenovo (Beijing) Limited

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Energy Manager’.
Publisher:
Lenovo(beijing) Limited  (signed by Lenovo (Beijing) Limited)

Product:
Energy Manager

Description:
Lenovo Energy Manager

Version:
1.5.0.16

MD5:
178855c4b1ed08d5bc639c5e851299b2

SHA-1:
9976e43be581d0699758aaa21102f498928bcb88

SHA-256:
19731ce86a3bc2d378da7a4a9ca8f018eaec9ddd6a43c6d0c3401a178978f387

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 9:54:52 AM UTC  (today)

File size:
14 MB (14,675,456 bytes)

Product version:
1.5.0.16

Copyright:
©2013 Lenovo. All rights reserved.

Original file name:
Energy Manager.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\lenovo\energy manager\energy manager.exe

Digital Signature
Signed by:
Lenovo (Beijing) Limited

Authority:
VeriSign, Inc.

Valid from:
12/21/2011 7:00:00 AM

Valid to:
3/22/2015 6:59:59 AM

Subject:
CN=Lenovo (Beijing) Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Lenovo (Beijing) Limited, L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2D5239E702A5EAD6CF85DA4853BD22E9

File PE Metadata
Compilation timestamp:
3/5/2014 9:07:53 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

Entry address:
0x69540

Entry point:
55, 8B, EC, E8, 18, 0B, 00, 00, E8, B3, FC, FF, FF, 5D, C3, CC, 3B, 0D, 2C, D0, 48, 00, 75, 02, F3, C3, E9, 51, 0D, 00, 00, CC, 55, 8B, EC, 51, 89, 4D, FC, 8B, 45, 08, 83, E0, 02, 74, 36, 68, A2, A4, 46, 00, 8B, 4D, FC, 8B, 51, FC, 52, 6A, 0C, 8B, 45, FC, 50, E8, 0A, 01, 00, 00, 8B, 4D, 08, 83, E1, 01, 74, 0F, 8B, 55, FC, 83, EA, 04, 52, E8, C2, F5, FF, FF, 83, C4, 04, 8B, 45, FC, 83, E8, 04, EB, 1F, 8B, 4D, FC, E8, F5, 0E, 00, 00, 8B, 45, 08, 83, E0, 01, 74, 0C, 8B, 4D, FC, 51, E8, 9E, F5, FF, FF, 83, C4...
 
[+]

Entropy:
7.5262

Developed / compiled with:
Microsoft Visual C++

Code size:
466.5 KB (477,696 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Energy Manager

Command:
C:\Program Files\lenovo\energy manager\energy manager.exe


Scan Energy Manager.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.