Versions

3, 0, 1, 0	15.79%
3, 0, 0, 9	31.58%
2, 0, 2, 9	5.26%
2, 0, 2, 8	15.79%
2, 0, 2, 6	5.26%
2, 0, 1, 4	26.32%

onekeystudio.exe has 6 known versions, the most recent one is 3, 0, 1, 0. onekeystudio.exe is run as a standard windows process with the logged in user's account privileges. During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. The average file size is about 1.83 MB. It is an authenticode code-signed executable issued to Lenovo (Beijing) Limited by the certification authority VeriSign. Some variations of the file have been seen to be installed with the program Onekey Theater from Lenovo. This is a .NET Common Language Runtime (CLR) assembly. During the process's lifecycle, the typical CPU resource utilization is about 0.0004% including both foreground and background operations, the average private memory consumption is about 7.92 MB with the maximum memory reaching around 11.1 MB. Addionally, typically read and write I/O disk operations is about 80 Bytes per minute for reads and 2 Bytes per minute for writes.