XTray.exe
McAfee Security-as-a-Service by McAfee (Signed)
| Version: | 5.4.0.148 |
| MD5: | 7fd574b1007f1e3d2859ae79dfbc6cdf |
| SHA1: | 0211568db7bdcdd210fb522a6d7948ac76e13cbf |
| SHA256: | 9490bbda96cbf70af956266eddae855264ce2ecc2a35e3ed39769726cd234792 |
Overview
xtray.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).
Details
| File name: | xtray.exe |
| Publisher: | McAfee, Inc. |
| Product name: | McAfee® Security-as-a-Service |
| Description: | XTray Application |
| Typical file path: | C:\Program Files\mcafee\managed virusscan\desktopui\xtray.exe |
| File version: | 5.4.0.148 |
| Product version: | 5.4.0 |
| Size: | 465.56 KB (476,736 bytes) |
| Certificate |
| Issued to: | McAfee |
| Authority (CA): | VeriSign |
| Effective date: | Wednesday, October 5, 2011 |
| Expiration date: | Tuesday, December 31, 2013 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ 8.0 |
| .NET CLR: | No |
More details
Behaviors
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'MVS Splash' → "C:\Program Files\McAfee\Managed VirusScan\DesktopUI\XTray.exe"
- 'McAfee Managed Services Tray' → "C:\Program Files\McAfee\Managed VirusScan\DesktopUI\XTray.Exe" /LOGON
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00010762% | |
| Kernel CPU: | 0.00008498% | |
| User CPU: | 0.00002264% | |
| Kernel CPU time: | 702 ms/min | |
| CPU cycles: | 8,149/sec | |
| Memory |
| Private memory: | 4.44 MB | |
| Private (maximum): | 9.14 MB | |
| Private (minimum): | 188 KB | |
| Non-paged memory: | 4.44 MB | |
| Virtual memory: | 68.46 MB | |
| Virtual memory (peak): | 71.46 MB | |
| Working set: | 2.63 MB | |
| Working set (peak): | 9.5 MB | |
| Page faults: | 7,863/min | |
| I/O |
| I/O read transfer: | 5 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O write transfer: | 12 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 10 Bytes/sec | |
| I/O other operations: | 1/sec | |
| Resource allocations |
| Threads: | 5 | |
| Handles: | 154 | |
| GUI GDI count: | 82 | |
| GUI GDI peak: | 85 | |
| GUI USER count: | 35 | |
| GUI USER peak: | 38 | |
Process properties
Threads
Averages
| XTray.exe (main module) |
| Total CPU: | 0.00019260% | |
| Kernel CPU: | 0.00016239% | |
| User CPU: | 0.00003021% | |
| CPU cycles: | 7,338/sec | |
| Memory: | 464 KB | |
| MSVCR80.dll |
| Total CPU: | 0.00000378% | |
| Kernel CPU: | 0.00000378% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 14/sec | |
| Memory: | 620 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Professional |
50.00% |
|
| Windows 7 Home Premium |
50.00% |
|
Distribution by country
TT installs about 50.00% of McAfee® Security-as-a-Service.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Lenovo |
100.00% |
|
