XTray.exe
McAfee Security-as-a-Service by McAfee (Signed)
Overview
There are 2 versions of xtray.exe in the wild, the latest version being 5.4.0.148. xtray.exe is run as a standard windows process with the logged in user's account privileges. During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. The average file size is about 465.44 KB. The file is a digitally signed and issued to McAfee by VeriSign. During the process's lifecycle, the typical CPU resource utilization is about 0.0018% including both foreground and background operations, the average private memory consumption is about 4.33 MB with the maximum memory reaching around 9.64 MB. Addionally, typically read and write I/O disk operations is about 62 Bytes per minute for reads and 13 Bytes per minute for writes.
 Details
|
| File name: | xtray.exe |
| Publisher: | McAfee, Inc. |
| Product name: | McAfee® Security-as-a-Service |
| Description: | XTray Application |
| Typical file path: | C:\Program Files\mcafee\managed virusscan\desktopui\xtray.exe |
| Certificate |
| Issued to: | McAfee |
| Authority (CA): | VeriSign |
| Effective date: | Wednesday, October 5, 2011 |
| Expiration date: | Tuesday, December 31, 2013 |
Behaviors
(Note, the behaviors below are for all versions of xtray.exe, select a unique version for details.)
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'MVS Splash' → "C:\Program Files\McAfee\Managed VirusScan\DesktopUI\XTray.exe"
- 'McAfee Managed Services Tray' → "C:\Program Files\McAfee\Managed VirusScan\DesktopUI\XTray.Exe" /LOGON
All file variations of xtray.exe
