defragtaskbar.exe

ashampoo GmbH & Co. KG

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘DefragTaskBar’. This is installed with Ashampoo Magical Defrag 2.
Publisher:
ashampoo GmbH & Co. KG  (signed and verified)

MD5:
aec009ce721a19bd829228e0651ff95e

SHA-1:
5a4c3ba4ba88aa15c07c99f577bd21c671b130ed

SHA-256:
938370177a4f1af23b014e6c08a7c83bdcd03851de53badff2f27a9cc0cd8711

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 4:38:57 PM UTC  (today)

File size:
164.2 KB (168,120 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ashampoo\ashampoo magical defrag 2\bin\defragtaskbar.exe

Digital Signature
Authority:
GeoTrust Inc

Valid from:
8/31/2006 11:00:05 AM

Valid to:
8/31/2007 11:00:05 AM

Subject:
CN=ashampoo GmbH & Co. KG, OU=CodeSigning, OU=Setup Department, O=ashampoo GmbH & Co. KG, L=Oldenburg, S=Niedersachsen, C=DE

Issuer:
CN=GeoTrust TrustCenter CodeSigning CA I, O=GeoTrust Inc, OU=GeoTrust TrustCenter CodeSigning CA, C=US

Serial number:
11EE00010020E1018B4A3BEC7691

File PE Metadata
Compilation timestamp:
2/9/2007 1:09:45 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:O6Tm0bH6jYLGUDn8A7rN2nskQnCYpukh/Bu+bs7VptSu0Kak+mN+w+fg:BDbHwY58njR4k+bsBptSBMb+5o

Entry address:
0x85A1

Entry point:
E8, A5, 2D, 00, 00, E9, 16, FE, FF, FF, CC, CC, CC, CC, CC, 8B, 4C, 24, 0C, 57, 85, C9, 0F, 84, 92, 00, 00, 00, 56, 53, 8B, D9, 8B, 74, 24, 14, F7, C6, 03, 00, 00, 00, 8B, 7C, 24, 10, 75, 0B, C1, E9, 02, 0F, 85, 85, 00, 00, 00, EB, 27, 8A, 06, 83, C6, 01, 88, 07, 83, C7, 01, 83, E9, 01, 74, 2B, 84, C0, 74, 2F, F7, C6, 03, 00, 00, 00, 75, E5, 8B, D9, C1, E9, 02, 75, 61, 83, E3, 03, 74, 13, 8A, 06, 83, C6, 01, 88, 07, 83, C7, 01, 84, C0, 74, 37, 83, EB, 01, 75, ED, 8B, 44, 24, 10, 5B, 5E, 5F, C3, F7, C7, 03...
 
[+]

Packer / compiler:
PEQuake V0.06

Code size:
84 KB (86,016 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
DefragTaskBar

Command:
"C:\Program Files\ashampoo\ashampoo magical defrag 2\bin\defragtaskbar.exe"


The file defragtaskbar.exe has been discovered within the following program.

Ashampoo Magical Defrag 2  by Ashampoo GmbH & Co. KG
Publisher's description - “Boost up your computer's performance. When was the last time you defragmented your hard drive? Can't quite remember? Then join the ranks of many users that shy away from the time-consuming defragmentation of their hard disks.”
www.ashampoo.com
19% remove it
 
Powered by Should I Remove It?

Scan defragtaskbar.exe - Powered by Reason Core Security