home

w4aud02us17.exe

ADI Audio codec AD1986 driver for Win7

Lenovo Group Limited

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from download.lenovo.com.
Publisher:
Lenovo Group Limited

Product:
ADI Audio codec AD1986 driver for Win7

Description:
ADI Audio codec AD1986 driver for Win7 Setup

Version:
6.10.01.6585-0000(32

MD5:
dd468a7aac2c5a28be15da410cdde71b

SHA-1:
62115b0eafc05a7c900f992c9281372990fe3f70

SHA-256:
ec8d1c7610f31a5d65fd93babcd980573d35a7414f59ed7abad58ac1587435f2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 1:03:07 PM UTC  (today)

File size:
3.8 MB (4,022,544 bytes)

Product version:
6.10.01.6585-0000(32

Copyright:
Copyright (C) Lenovo 2009.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\w4aud02us17.exe

File PE Metadata
Compilation timestamp:
6/20/1992 4:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:mJDJaJ1PCXbxsXhW6Eisq0skyeM/iSbRwC5s2:8MWFsRW676skyeM/iG

Entry address:
0x9A58

Entry point:
FF, CE, FE, C7, 00, C8, 84, F8, F6, C4, 49, 4A, 85, D6, 8D, 35, 96, 05, EE, 9F, FE, C2, 0F, BE, C1, 88, FE, 8D, 2D, E5, A1, 20, 9A, FF, C0, E8, 8F, 00, 00, 00, F3, 41, 8D, 35, 84, 65, 3A, 45, 49, 13, CE, 8B, F7, 86, FC, 85, D5, B8, 93, 82, 4F, EF, 8D, 05, 36, 0A, FF, 28, 85, EF, 78, 08, 87, ED, 69, C1, 76, EA, FE, 1F, BD, 66, 62, 56, 92, 85, C7, 8B, EB, 8D, 45, 00, 0F, B7, E9, 8B, F0, 85, DB, 78, 08, F7, C1, 29, 5C, F5, D6, 89, F5, 0C, 94, 69, EE, C6, AF, 39, 6E, 56, 8D, 2D, D9, 88, 88, 8F, 8D, 05, 42, 43...
 
[+]

Entropy:
7.9984  (probably packed)

Code size:
36.5 KB (37,376 bytes)

The file w4aud02us17.exe has been seen being distributed by the following URL.

https://download.lenovo.com/pccbbs/.../w4aud02us17.exe

Scan w4aud02us17.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.