home

PeakShiftNotifier.exe

ピークシフト設定ツール

NEC Personal Computers, Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PeakShiftTool’.
Publisher:
NEC Personal Computers, Ltd.  (signed and verified)

Product:
ピークシフト設定ツール

Description:
ピークシフト設定ツール トレイアイコン

Version:
2, 0, 0, 3

MD5:
93124941cd6c9d4989af5a910a36fb34

SHA-1:
619d50d483bfe99c4c63483c372fe0b04fa6f75a

SHA-256:
bf434d76ddbfd3dba09beab5297c5b52453fb1ed6c11efacabe034d22723fdc9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:24:29 AM UTC  (today)

File size:
175.8 KB (180,016 bytes)

Product version:
2, 0, 0, 3

Copyright:
Copyright (C) NEC Personal Computers, Ltd. 2011-2014

Original file name:
PeakShiftNotifier.exe

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\peakshifttool\peakshiftnotifier.exe

Digital Signature
Signed by:
NEC Personal Computers, Ltd.

Authority:
VeriSign, Inc.

Valid from:
5/24/2013 9:00:00 AM

Valid to:
6/13/2014 8:59:59 AM

Subject:
CN="NEC Personal Computers, Ltd.", OU=PDD3, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="NEC Personal Computers, Ltd.", L=Shinagawa-ku, S=Tokyo, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
01A96959CA187E666DB195ECBC99A549

File PE Metadata
Compilation timestamp:
6/5/2014 12:30:42 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:rK/zyOnbo2CX9dEUB/ffhgRfQd7s679ROdHzVEMFCvJgZP1auWdEXV:G/zyaoDNjfOVE79ROdHzSEPguMa

Entry address:
0x1A40

Entry point:
48, 83, EC, 28, E8, DB, 03, 00, 00, 48, 83, C4, 28, E9, FA, FC, FF, FF, FF, 25, 80, F8, 00, 00, FF, 25, 92, F8, 00, 00, CC, CC, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, 2D, C8, 01, 00, FF, 15, 7F, F6, 00, 00, 4C, 8B, 1D, 18, C9, 01, 00, 4C, 89, 5C, 24, 58, 45, 33, C0, 48, 8D, 54, 24, 60, 48, 8B, 4C, 24, 58, E8, 59, 04, 00, 00, 48, 89, 44, 24, 50, 48, 83, 7C, 24, 50, 00, 74, 41, 48, C7, 44, 24, 38, 00, 00, 00, 00, 48, 8D, 44, 24, 48, 48, 89, 44, 24, 30, 48, 8D, 44, 24, 40, 48, 89, 44, 24...
 
[+]

Entropy:
5.6518

Code size:
63.5 KB (65,024 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PeakShiftTool

Command:
C:\Program Files\peakshifttool\peakshiftnotifier.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.