home

ESTray.exe

離席センサ設定ツール

NEC Personal Products, Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘EcoSensor’.
Publisher:
NEC Corporation, NEC Personal Products, Ltd.  (signed by NEC Personal Products, Ltd.)

Product:
離席センサ設定ツール

Description:
離席センサ設定ツール トレイアイコン

Version:
1, 1, 0, 2

MD5:
85f074e1a21cb967e5e2c00e9d72159d

SHA-1:
f3350c4e3a9d3003fa3f5246cc13e5d8428f956d

SHA-256:
0f2a715f631f7496a0135234d883c770cab817f542f873f72cf987e71050dc10

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 11:50:16 PM UTC  (a few moments ago)

File size:
205.9 KB (210,824 bytes)

Product version:
1, 1, 0, 2

Copyright:
Copyright (C) NEC Corporation, NEC Personal Products, Ltd. 2010-2011

Original file name:
ESTray.exe

File type:
Executable application (Win32 EXE)

Language:
Japanese (Japan)

Common path:
C:\Program Files\ecosensor\estray.exe

Digital Signature
Signed by:
NEC Personal Products, Ltd.

Authority:
VeriSign, Inc.

Valid from:
1/18/2011 1:00:00 AM

Valid to:
1/19/2012 12:59:59 AM

Subject:
CN="NEC Personal Products, Ltd.", OU=002, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="NEC Personal Products, Ltd.", L=Shinagawa-ku, S=Tokyo, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
61D18BBB183CA8C70C9E42C6A6DA2683

File PE Metadata
Compilation timestamp:
2/15/2011 8:40:19 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:HS2IUByvhOX5nMkF59QWujRQrzOoYvw5eDf0:y0YhOX5jCWCRQrKo15eD8

Entry address:
0x40AE

Entry point:
E8, 2D, 05, 00, 00, E9, 3A, FD, FF, FF, FF, 25, 20, 51, 40, 00, 6A, 14, 68, B8, 64, 40, 00, E8, 6E, 04, 00, 00, FF, 35, 5C, 86, 40, 00, 8B, 35, E4, 50, 40, 00, FF, D6, 59, 89, 45, E4, 83, F8, FF, 75, 0C, FF, 75, 08, FF, 15, E0, 50, 40, 00, 59, EB, 67, 6A, 08, E8, 8C, 05, 00, 00, 59, 83, 65, FC, 00, FF, 35, 5C, 86, 40, 00, FF, D6, 89, 45, E4, FF, 35, 58, 86, 40, 00, FF, D6, 59, 59, 89, 45, E0, 8D, 45, E0, 50, 8D, 45, E4, 50, FF, 75, 08, 8B, 35, D0, 50, 40, 00, FF, D6, 59, 50, E8, 4F, 05, 00, 00, 89, 45, DC...
 
[+]

Entropy:
6.8667

Code size:
16 KB (16,384 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
EcoSensor

Command:
C:\Program Files\ecosensor\estray.exe


Scan ESTray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.