home

pelico.exe

PRIMAX ELECTRONICS LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Lenovo Input Device Main Program’.
Publisher:
TPMX Electronics Ltd.  (signed by PRIMAX ELECTRONICS LTD.)

Version:
1, 0, 0, 1

MD5:
5f8864019471352842f61717539011af

SHA-1:
51cd673b350233b282aab8db69479992897a8131

SHA-256:
911ab4989cc949df8c640cd9af6a9aa69eec3c1cd42a54d1613b0294a05930ef

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 5:58:38 PM UTC  (today)

File size:
92.6 KB (94,864 bytes)

Product version:
1.0.0.1

Copyright:
Copyright (c) 2010, TPMX Electronics Ltd.

Trademarks:
TPMX Electronics Ltd.

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\lenovo\lenovo ultraslim plus wireless keyboard & mouse\pelico.exe

Digital Signature
Signed by:
PRIMAX ELECTRONICS LTD.

Authority:
VeriSign, Inc.

Valid from:
6/15/2012 8:00:00 AM

Valid to:
7/19/2013 7:59:59 AM

Subject:
CN=PRIMAX ELECTRONICS LTD., OU=Information Appliance Device Divison, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=PRIMAX ELECTRONICS LTD., L=Taipei, S=Taiwan, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
05D3370C4EE6F3276066DB6B20223F9A

File PE Metadata
Compilation timestamp:
4/3/2013 6:29:05 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:mLsCHQz/U866QhgQ/v9Hu/m/VaEjW05bFkdJkpSsZ55w:mkCDh/3R9Jad2pSsZ5m

Entry address:
0x57B2

Entry point:
E8, 1A, 3F, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Entropy:
6.4300

Code size:
64 KB (65,536 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Lenovo Input Device Main Program

Command:
C:\Program Files\lenovo\lenovo ultraslim plus wireless keyboard & mouse\pelico.exe


Scan pelico.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.