home

lensccr.exe

Lenovo Quickshot

LENOVO(JAPAN)LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘LenSmartCover’. This is installed with Lenovo Quickshot.
Publisher:
Lenovo Corporation  (signed by LENOVO(JAPAN)LTD.)

Product:
Lenovo® Quickshot

Description:
Lenovo® Quickshot Client Resident Module

Version:
1.0.4.0

MD5:
e1a68797ce7cc5c05d6be2ba1ea4f002

SHA-1:
66ddeb9a74b03f3a4675a909411268f9563f8ec9

SHA-256:
9006ab13b5b777dffcb2e60bd6cb8ca2771114505b6f89c3f1441060750e76e2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 11:01:25 AM UTC  (today)

File size:
75.5 KB (77,304 bytes)

Product version:
1.0.4.0

Copyright:
Copyright (C) Lenovo 2013

Original file name:
lensccr.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\lenovo\quickshot\lensccr.exe

Digital Signature
Signed by:
LENOVO(JAPAN)LTD.

Authority:
VeriSign, Inc.

Valid from:
9/4/2012 2:00:00 AM

Valid to:
11/28/2013 12:59:59 AM

Subject:
CN=LENOVO(JAPAN)LTD., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=LENOVO(JAPAN)LTD., L=Minato-ku, S=Tokyo, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6433A25DB5498D25B5D53720AD2374B6

File PE Metadata
Compilation timestamp:
10/31/2013 6:17:38 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
1536:Ud2TBf65StpaclvrsWjcdNvlE2lzWXR6D+8ei:UkVkS5MNdE2lzWXR6Wi

Entry address:
0x1A47

Entry point:
E8, 72, 15, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 83, 7D, 08, 00, 74, 2D, FF, 75, 08, 6A, 00, FF, 35, B8, F7, 40, 00, FF, 15, 98, 80, 40, 00, 85, C0, 75, 18, 56, E8, 54, 1A, 00, 00, 8B, F0, FF, 15, 94, 80, 40, 00, 50, E8, 59, 1A, 00, 00, 59, 89, 06, 5E, 5D, C3, 55, 8B, EC, FF, 15, 9C, 80, 40, 00, 6A, 01, A3, 44, F1, 40, 00, E8, 7F, 1A, 00, 00, FF, 75, 08, E8, 8C, 19, 00, 00, 83, 3D, 44, F1, 40, 00, 00, 59, 59, 75, 08, 6A, 01, E8, 65, 1A, 00, 00, 59, 68, 09, 04, 00, C0, E8, 5A, 19, 00, 00, 59, 5D, C3, 55...
 
[+]

Code size:
26.5 KB (27,136 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
LenSmartCover

Command:
"C:\Program Files\lenovo\quickshot\lensccr.exe"


The file lensccr.exe has been discovered within the following program.

Lenovo Quickshot  by Lenovo
9% remove it
 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.