» wmcevent.dll
Overview
Analysis
File Details
Programs (1)

wmcevent.dll

Lenovo (Beijing) Limited

This is installed with Onekey Theater.

File name:

wmcevent.dll

Publisher:

Lenovo (Beijing) Limited (signed and verified)

MD5:

174543face4942f96abb728724148488

SHA-1:

728cacdd16ad6af0e37dd0e3fb192683c2766afd

SHA-256:

6dedcde5d928156451bc0cb172e4c0f7b01fec92b78bdcb0e4eeb39cc0aa4f38

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 9:54:08 AM UTC (today)

File size:

109.9 KB (112,544 bytes)

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\lenovo\onekey theater\wmcevent.dll

Digital Signature

Signed by:

Lenovo (Beijing) Limited

Authority:

VeriSign, Inc.

Valid from:

12/8/2009 8:00:00 AM

Valid to:

1/8/2012 7:59:59 AM

Subject:

CN=Lenovo (Beijing) Limited, OU=IT, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Lenovo (Beijing) Limited, L=Beijing, S=Beijing, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

2EDBA85021EE00C973B5C5398B2E1155

Registration

CLSID:

{C0CD68EF-F1DA-4217-8C7A-3352AE8FFE9E}

ProgID:

WMCEvent.StatusSink.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

10/18/2010 2:32:01 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

1536:tb+eLFhTC/YtjwfiOAiY5Kxz3z7Wqt6Mv2fWaMvC:tXTC/DpYO3z7Wqt6B

Entry address:

0x735F

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, 92, 3D, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 68, 40, 61, 00, 10, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, DC, 35, 01, 10, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 6A, 0C, 68, B0, 22, 01... 
[+]

Entropy:

5.9810

Code size:

56 KB (57,344 bytes)

The file wmcevent.dll has been discovered within the following program.

Onekey Theater by Lenovo

The Lenovo OneKey Theater software allows users to simplify the audio and visual experience. By pressing the "OneKey" button, OneKey Theater gives users an easy way to adjust the PC’s display and sound effect settings.

www.Lenovo.com

9% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.