home

PSafeSystray.exe

PSafe Core

PSafe Tecnologia S.A.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PSafeTray’.
Publisher:
PSafe  (signed by PSafe Tecnologia S.A.)

Product:
PSafe Core

Description:
PSafe System Tray

Version:
3.7.51407.11301

MD5:
000996cc9d490c53bc93cce3b6f2a711

SHA-1:
ec0583702444cf334e51e44826eda5db2419c665

SHA-256:
fc045eaa5e41ac2cc5a34254ba23f8db60e368c42a15c6cc544d2d83c4558bd4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:45:55 PM UTC  (today)

File size:
3.2 MB (3,370,184 bytes)

Product version:
3.7.51407.11301

Copyright:
Copyright (C) 2013

Original file name:
PSafeSystray.exe

File type:
Executable application (Win32 EXE)

Language:
Portugués (Brasil)

Common path:
C:\Program Files\psafe\psafesystray.exe

Digital Signature
Signed by:
PSafe Tecnologia S.A.

Authority:
DigiCert Inc

Valid from:
1/20/2013 7:00:00 PM

Valid to:
1/26/2015 7:00:00 AM

Subject:
CN=PSafe Tecnologia S.A., O=PSafe Tecnologia S.A., L=Rio de Janeiro, S=Rio de Janeiro, C=BR

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
07F79AA9335B794D70779F719061AFF2

File PE Metadata
Compilation timestamp:
7/11/2014 9:01:13 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x1CF980

Entry point:
E8, 65, 0A, 00, 00, E9, 1C, FD, FF, FF, FF, 25, 6C, 88, 61, 00, FF, 25, 68, 88, 61, 00, FF, 25, 64, 88, 61, 00, FF, 25, 60, 88, 61, 00, FF, 25, 5C, 88, 61, 00, FF, 25, 58, 88, 61, 00, FF, 25, 54, 88, 61, 00, FF, 25, 50, 88, 61, 00, FF, 25, 4C, 88, 61, 00, FF, 25, 48, 88, 61, 00, FF, 25, 44, 88, 61, 00, FF, 25, 40, 88, 61, 00, FF, 25, 3C, 88, 61, 00, FF, 25, 38, 88, 61, 00, FF, 25, 34, 88, 61, 00, FF, 25, 30, 88, 61, 00, CC, CC, CC, CC, CC, CC, FF, 25, 2C, 88, 61, 00, FF, 25, 28, 88, 61, 00, FF, 25, 24, 88...
 
[+]

Entropy:
6.4525

Code size:
2.1 MB (2,190,336 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PSafeTray

Command:
"C:\Program Files\psafe\psafesystray.exe"


Scan PSafeSystray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.