home

osd.exe

On-Screen Display Application

Chicony Electronics Co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘aOSD’.
Publisher:
Chicony  (signed by Chicony Electronics Co., Ltd.)

Product:
On-Screen Display Application

Version:
1, 2, 0, 0

MD5:
8dcf7262173b723804064b07d8253f9a

SHA-1:
53247a79042bb9e578ec217d8acfdb79cec97f83

SHA-256:
704a278eb61eac981b5ac8d408e6276bb4df98296b1d69f1b38d4a5ec4944ab7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:38:57 AM UTC  (today)

File size:
114.3 KB (117,072 bytes)

Product version:
1, 2, 0, 0

Copyright:
Copyright (C) 2015

Original file name:
LenovoOSD201211.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\lenovo\thinkpad compact keyboard with trackpoint driver\osd.exe

Digital Signature
Signed by:
Chicony Electronics Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
10/3/2012 9:00:00 AM

Valid to:
10/3/2015 8:59:59 AM

Subject:
CN="Chicony Electronics Co., Ltd.", OU=Keyboard, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Chicony Electronics Co., Ltd.", L=Taipei, S=Taiwan, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7A329B53E3FBF61A1B815EFF620FDC85

File PE Metadata
Compilation timestamp:
6/15/2015 4:27:39 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:yl8s6T75MMCCbEq3km9uvxsY5kWElgTqUVPVPB9etLDOmlX:wObdARVPVZ9etLDOmlX

Entry address:
0x4ABB

Entry point:
E8, 79, 38, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 28, 85, 41, 00, 89, 0D, 24, 85, 41, 00, 89, 15, 20, 85, 41, 00, 89, 1D, 1C, 85, 41, 00, 89, 35, 18, 85, 41, 00, 89, 3D, 14, 85, 41, 00, 66, 8C, 15, 40, 85, 41, 00, 66, 8C, 0D, 34, 85, 41, 00, 66, 8C, 1D, 10, 85, 41, 00, 66, 8C, 05, 0C, 85, 41, 00, 66, 8C, 25, 08, 85, 41, 00, 66, 8C, 2D, 04, 85, 41, 00, 9C, 8F, 05, 38, 85, 41, 00, 8B, 45, 00, A3, 2C, 85, 41, 00, 8B, 45, 04, A3, 30, 85, 41, 00, 8D, 45, 08, A3, 3C, 85, 41, 00, 8B...
 
[+]

Entropy:
6.0783

Code size:
68 KB (69,632 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
aOSD

Command:
C:\Program Files\lenovo\thinkpad compact keyboard with trackpoint driver\osd.exe


The file osd.exe has been discovered within the following programs.

 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.