» PowerSuiteTray.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (3)

PowerSuiteTray.exe

simplitec Power Suite

simplitec GmbH

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘simplitec Power Suite Tray’. This is installed with multiple programs including simplisafe FREE and simplitec Power Suite FREE.

File name:

PowerSuiteTray.exe

Publisher:

simplitec GmbH (signed and verified)

Product:

simplitec Power Suite

Description:

simplitec Power Suite Tray

Version:

1.0.0.4

MD5:

0592b7bf862f442ecdced9aaba1e3b0e

SHA-1:

1fdd9ff039b2dc949270e01025aa2dfd1d065513

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 2:56:38 PM UTC (today)

File size:

743.4 KB (761,192 bytes)

Product version:

1.4.4.6

Original file name:

PowerSuiteTray.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\simplitec\simplitec power suite free\powersuitetray.exe

Digital Signature

Signed by:

simplitec GmbH

Authority:

VeriSign, Inc.

Valid from:

12/27/2011 5:00:00 PM

Valid to:

12/27/2012 4:59:59 PM

Subject:

CN=simplitec GmbH, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=simplitec GmbH, L=Berlin, S=Berlin, C=DE

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

75C4B64D5578D489826DD97710A2612E

File PE Metadata

Compilation timestamp:

11/30/2012 7:16:39 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:F+f2387ygoWidG4MO/eMhO9OsCLbSNWs5Dd:8f2sOPZJMO/eMqBd

Entry address:

0x16548

Entry point:

E8, D6, 06, 00, 00, E9, 37, FD, FF, FF, 8B, FF, 55, 8B, EC, F6, 45, 08, 02, 57, 8B, F9, 74, 25, 56, 68, AA, 6E, 41, 00, 8D, 77, FC, FF, 36, 6A, 0C, 57, E8, B5, 03, 00, 00, F6, 45, 08, 01, 74, 07, 56, E8, FB, F7, FF, FF, 59, 8B, C6, 5E, EB, 14, E8, 20, 09, 00, 00, F6, 45, 08, 01, 74, 07, 57, E8, E4, F7, FF, FF, 59, 8B, C7, 5F, 5D, C2, 04, 00, FF, 25, 9C, 92, 44, 00, FF, 25, A4, 92, 44, 00, FF, 25, B0, 92, 44, 00, 3B, 0D, 50, 83, 45, 00, 75, 02, F3, C3, E9, FA, 06, 00, 00, CC, FF, 25, B4, 92, 44, 00, FF, 25... 
[+]

Entropy:

6.0051

Code size:

286 KB (292,864 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

simplitec Power Suite Tray

Command:

"C:\Program Files\simplitec\simplitec power suite free\powersuitetray.exe"

The file PowerSuiteTray.exe has been discovered within the following programs.

simplifast FREE by simplitec GmbH

simplifast is marketed as a PC performance optimizer that utilizes several techniques to attempt to increase the speed of the user's PC include registry tuning (which is a practice that is often criticized by experts as producing no results) as well as hard drive scrubbing.

www.simplitec.com

44% remove it

simplisafe FREE by simplitec GmbH

About 3% of users remove it

simplitec Power Suite FREE by simplitec GmbH

simplitec Power Suite is marketed as a PC performance optimizer that utilizes several techniques to attempt to increase the speed of the user's PC include registry tuning (which is a practice that is often criticized by experts as producing no results) as well as hard drive scrubbing.

55% remove it

Scan PowerSuiteTray.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.