Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

12.0.104.000 20.00%
11.0.768.000 8.57%
11.0.000.504 20.00%
11.0.000.057 8.57%
11.0.000.038 2.86%
11.0.000.020 20.00%
11.0.000.018 2.86%
10.2.078.000 2.86%
10.2.074.000 2.86%
10.2.047.000 8.57%
10.1.065.000 2.86%

Relationships

Child process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegOpenKeyExW, RegQueryValueExW, RegCreateKeyExA, RegSetValueExA, RegOpenKeyExA, RegCloseKey, RegQueryValueExA
kernel32.dll
GetCurrentProcess, TerminateProcess, GetStartupInfoA, InterlockedExchange, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, QueryPerformanceCounter, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, FreeLibrary, LoadLibraryA, GetUserDefaultLangID, CloseHandle, FlushFileBuffers, GetTickCount, WriteFile, ReadFile, PeekNamedPipe, ResetEvent, WaitForSingleObject, Sleep, CreateFileA, SetEvent, CreateThread, CreatePipe, CreateEventA, lstrlenA, MoveFileA, DeleteFileA, GetLocalTime, GetFileSizeEx, SetStdHandle, SetFilePointer, UnhandledExceptionFilter, SetCurrentDirectoryA, GetCurrentDirectoryA, lstrcpyA, SetConsoleTitleA, GetConsoleTitleA, AllocConsole, lstrcatA, GetDiskFreeSpaceExA, GlobalUnlock, GlobalLock, GlobalAlloc, FindClose, FindNextFileA, FindFirstFileA, WideCharToMultiByte, LocalFree, GetCommandLineW, lstrcmpA, GetModuleFileNameA, RaiseException, InterlockedCompareExchange, GetVersionExA, GetWindowsDirectoryW, GetSystemDirectoryW, GetSystemWow64DirectoryW, IsDebuggerPresent, GetLastError
msvcp90.dll
DllMain
msvcr90.dll
DllMain
ole32.dll
CoUninitialize
shell32.dll
ShellExecuteExA, CommandLineToArgvW
shlwapi.dll
PathAppendA, PathRemoveFileSpecA, SHDeleteKeyA
user32.dll
CloseClipboard, wsprintfA, SetClipboardData, EmptyClipboard, LoadImageA, LoadStringA, OpenClipboard
zpeng25.dll
Py_VerboseFlag, _Py_NoneStruct

zatray.exe

ZoneAlarm by Check Point Software Technologies Ltd. (Signed)

Remove zatray.exe
Version:   10.2.074.000
MD5:   1bd39bc3bc538d1af8e00016a82b7dbe
SHA1:   96a473ec9d159f8cfef229e6b3f201642514a430
SHA256:   4feb4805c0ce1197223e7a90bbaf8158b6613c06c93ba1bbae9e56eb7c183ab8

What is zatray.exe?

zatray.exe is the program that runs in the notification area system tray for the ZoneAlarm application.

About zatray.exe (from Check Point Software Technologies Ltd.)

“ZoneAlarm Security Toolbar is keeping you protected and connected.”

Overview

zatray.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The file is digitally signed by Check Point Software Technologies Ltd. which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:zatray.exe
Publisher:Check Point Software Technologies LTD
Product name:ZoneAlarm
Typical file path:C:\Program Files\checkpoint\zonealarm\zatray.exe
File version:10.2.074.000
Size:71.67 KB (73,392 bytes)
Certificate
Issued to:Check Point Software Technologies Ltd.
Authority (CA):VeriSign
Expiration date:Monday, May 5, 2014
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'ZoneAlarm' → "C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe"

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00059534%
0.028634%
Kernel CPU:0.00009815%
0.013761%
User CPU:0.00049719%
0.014873%
Kernel CPU time:2,137 ms/min
100,923,805ms/min
Memory
Private memory:46.66 MB
21.59 MB
Private (maximum):11.34 MB
Private (minimum):2.12 MB
Non-paged memory:46.66 MB
21.59 MB
Virtual memory:159.85 MB
140.96 MB
Virtual memory (peak):178.63 MB
169.69 MB
Working set:5.58 MB
18.61 MB
Working set (peak):52.77 MB
37.95 MB
Resource allocations
Threads:12
12
Handles:334
600
GUI GDI count:135
103
GUI GDI peak:139
142
GUI USER count:11
49
GUI USER peak:14
71

BehaviorsProcess properties

Tray notification:Yes
Integrety level:Medium
Platform:64-bit
Command line:"C:\Program Files\checkpoint\zonealarm\zatray.exe"
Owner:User

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 60.00%
Windows 7 Ultimate 11.43%
Microsoft Windows XP 8.57%
Windows 7 Professional 5.71%
Windows Vista Home Premium 2.86%
Windows Vista Home Basic 2.86%
Windows 8 Pro 2.86%
Windows 7 Ultimate N 2.86%
Windows Vista Ultimate 2.86%

Distribution by countryDistribution by country

United States installs about 60.00% of ZoneAlarm.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Acer 40.00%
Sony 20.00%
Hewlett-Packard 20.00%
Sahara 10.00%
Toshiba 10.00%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE