home

harmonyuserstartup.exe

Harmony

Cambridge Silicon Radio Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘HarmonyUserStartup’.
Publisher:
Cambridge Silicon Radio Limited  (signed by Cambridge Silicon Radio Ltd.)

Product:
Harmony

Description:
Csr Harmony User Startup Application

Version:
2.1.63.0

MD5:
a3f5c98f698e2c8d79b95c5eea933af4

SHA-1:
8b03077f44cd67beef67f9569bb16c48c6a30e62

SHA-256:
6828b464a0f28e9f2d3895a1019dc92872884d0d2ec58d72116d9a3553fcb123

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:27:17 PM UTC  (a few moments ago)

File size:
41.7 KB (42,712 bytes)

Product version:
2.1.63.0

Copyright:
Copyright © Cambridge Silicon Radio Limited, 2010-12Cambridge Silicon Radio Limited

Original file name:
HarmonyUserStartup

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\csr\csr harmony wireless software stack\harmonyuserstartup.exe

Digital Signature
Signed by:
Cambridge Silicon Radio Ltd.

Authority:
GlobalSign nv-sa

Valid from:
11/24/2011 8:12:02 AM

Valid to:
11/24/2014 8:12:02 AM

Subject:
CN=Cambridge Silicon Radio Ltd., OU=User Mode Host Tools, O=Cambridge Silicon Radio Ltd., L=Cambridge, S=Cambridgeshire, C=GB

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121A82FA068E6C20657AE6B01BB05095430

File PE Metadata
Compilation timestamp:
3/20/2012 10:12:25 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
768:HJMPWAntrDAUvzKuKYWoRyOYNntePZvlASLvXX:HyeAnW+BWo4OYNnEbASL

Entry address:
0x4A50

Entry point:
48, 83, EC, 28, E8, 2B, 03, 00, 00, 48, 83, C4, 28, E9, F6, FC, FF, FF, FF, 25, 28, 18, 00, 00, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, 95, 48, 00, 00, FF, 15, 97, 16, 00, 00, 4C, 8B, 1D, 80, 49, 00, 00, 4C, 89, 5C, 24, 58, 45, 33, C0, 48, 8D, 54, 24, 60, 48, 8B, 4C, 24, 58, E8, EF, 04, 00, 00, 48, 89, 44, 24, 50, 48, 83, 7C, 24, 50, 00, 74, 41, 48, C7, 44, 24, 38, 00, 00, 00, 00, 48, 8D, 44, 24, 48, 48, 89, 44, 24, 30, 48, 8D, 44, 24, 40, 48, 89, 44, 24, 28, 48, 8D, 05, 40, 48, 00, 00...
 
[+]

Code size:
17 KB (17,408 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
HarmonyUserStartup

Command:
C:\Program Files\csr\csr harmony wireless software stack\harmonyuserstartup.exe


Scan harmonyuserstartup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.