home

PeakShiftNotifier.exe

ピークシフト設定ツール

NEC Personal Computers, Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PeakShiftTool’.
Publisher:
NEC Personal Computers, Ltd.  (signed and verified)

Product:
ピークシフト設定ツール

Description:
ピークシフト設定ツール トレイアイコン

Version:
2, 0, 0, 3

MD5:
c6ec5e796e15f4193e295236baeae204

SHA-1:
5c37b5a66019d241d24e854f091b3177ec76c1bb

SHA-256:
ac657fe26cbf3a63a54d9259027757135fe4cbf34f2ef2561e4579e299890b95

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 3:49:46 AM UTC  (today)

File size:
151.8 KB (155,440 bytes)

Product version:
2, 0, 0, 3

Copyright:
Copyright (C) NEC Personal Computers, Ltd. 2011-2014

Original file name:
PeakShiftNotifier.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\peakshifttool\peakshiftnotifier.exe

Digital Signature
Signed by:
NEC Personal Computers, Ltd.

Authority:
VeriSign, Inc.

Valid from:
5/24/2013 9:00:00 AM

Valid to:
6/13/2014 8:59:59 AM

Subject:
CN="NEC Personal Computers, Ltd.", OU=PDD3, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="NEC Personal Computers, Ltd.", L=Shinagawa-ku, S=Tokyo, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
01A96959CA187E666DB195ECBC99A549

File PE Metadata
Compilation timestamp:
6/5/2014 12:29:26 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:tDoIohuPzAZzcpechvKrGzTSpc6/pMQdJnA7GjOCTV0MFCvJgZP1auWdoXv:tDxohNgzhuGPic6/pMVyOCTaEPguMg

Entry address:
0x1896

Entry point:
E8, 9D, 04, 00, 00, E9, 37, FD, FF, FF, FF, 25, 6C, E1, 40, 00, FF, 25, 78, E1, 40, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 58, 92, 41, 00, 89, 0D, 54, 92, 41, 00, 89, 15, 50, 92, 41, 00, 89, 1D, 4C, 92, 41, 00, 89, 35, 48, 92, 41, 00, 89, 3D, 44, 92, 41, 00, 66, 8C, 15, 70, 92, 41, 00, 66, 8C, 0D, 64, 92, 41, 00, 66, 8C, 1D, 40, 92, 41, 00, 66, 8C, 05, 3C, 92, 41, 00, 66, 8C, 25, 38, 92, 41, 00, 66, 8C, 2D, 34, 92, 41, 00, 9C, 8F, 05, 68, 92, 41, 00, 8B, 45, 00, A3, 5C, 92, 41, 00, 8B, 45, 04...
 
[+]

Entropy:
5.8103

Code size:
49 KB (50,176 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PeakShiftTool

Command:
C:\Program Files\peakshifttool\peakshiftnotifier.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.