home

PSafeSystray.exe

PSafe Core

PSafe Tecnologia S.A.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PSafeTray’.
Publisher:
PSafe  (signed by PSafe Tecnologia S.A.)

Product:
PSafe Core

Description:
PSafe System Tray

Version:
3.7.51407.11301

MD5:
da68ae3ec07bd6ecccd67675029b9269

SHA-1:
0417f62d8e2b2647e09de011018759f988406b12

SHA-256:
18461d0437b2d087c1f3fac099a2feb1070ed6fadc15110d4516c33b43dfdb2e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:58:27 PM UTC  (today)

File size:
3.2 MB (3,370,184 bytes)

Product version:
3.7.51407.11301

Copyright:
Copyright (C) 2013

Original file name:
PSafeSystray.exe

File type:
Executable application (Win32 EXE)

Language:
Portugués (Brasil)

Common path:
C:\Program Files\psafe\psafesystray.exe

Digital Signature
Signed by:
PSafe Tecnologia S.A.

Authority:
DigiCert Inc

Valid from:
1/20/2013 7:00:00 PM

Valid to:
1/26/2015 7:00:00 AM

Subject:
CN=PSafe Tecnologia S.A., O=PSafe Tecnologia S.A., L=Rio de Janeiro, S=Rio de Janeiro, C=BR

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
07F79AA9335B794D70779F719061AFF2

File PE Metadata
Compilation timestamp:
7/11/2014 9:01:13 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x1CF980

Entry point:
E8, 65, 0A, 00, 00, E9, 1C, FD, FF, FF, FF, 25, 6C, 88, 61, 00, FF, 25, 68, 88, 61, 00, FF, 25, 64, 88, 61, 00, FF, 25, 60, 88, 61, 00, FF, 25, 5C, 88, 61, 00, FF, 25, 58, 88, 61, 00, FF, 25, 54, 88, 61, 00, FF, 25, 50, 88, 61, 00, FF, 25, 4C, 88, 61, 00, FF, 25, 48, 88, 61, 00, FF, 25, 44, 88, 61, 00, FF, 25, 40, 88, 61, 00, FF, 25, 3C, 88, 61, 00, FF, 25, 38, 88, 61, 00, FF, 25, 34, 88, 61, 00, FF, 25, 30, 88, 61, 00, CC, CC, CC, CC, CC, CC, FF, 25, 2C, 88, 61, 00, FF, 25, 28, 88, 61, 00, FF, 25, 24, 88...
 
[+]

Entropy:
6.4525

Code size:
2.1 MB (2,190,336 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PSafeTray

Command:
"C:\Program Files\psafe\psafesystray.exe"


Scan PSafeSystray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.