zatray.exe
ZoneAlarm by Check Point Software Technologies Ltd. (Signed)
| Version: | 10.2.047.000 |
| MD5: | 63d666d602b9553734812ebafea4fb5a |
| SHA1: | 58dca085804a26e85cc934b12394b65dfea8d893 |
| SHA256: | a56d7b2d19992efb8d1a0d44b6c3dd2ff1c8e2c2b5e163fff67638a93d319ac3 |
What is zatray.exe?
zatray.exe is the program that runs in the notification area system tray for the ZoneAlarm application.
About zatray.exe (from Check Point Software Technologies Ltd.)
“ZoneAlarm Security Toolbar is keeping you protected and connected.”
Overview
zatray.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The file is digitally signed by Check Point Software Technologies Ltd. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | zatray.exe |
| Publisher: | Check Point Software Technologies LTD |
| Product name: | ZoneAlarm |
| Typical file path: | C:\Program Files\checkpoint\zonealarm\zatray.exe |
| File version: | 10.2.047.000 |
| Size: | 71.64 KB (73,360 bytes) |
| Certificate |
| Issued to: | Check Point Software Technologies Ltd. |
| Authority (CA): | VeriSign |
| Expiration date: | Monday, May 5, 2014 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ 9.0 |
| .NET CLR: | No |
More details
Behaviors
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'ZoneAlarm' → "C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe"
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00067926% | |
| Kernel CPU: | 0.00029718% | |
| User CPU: | 0.00038209% | |
| Kernel CPU time: | 1,295 ms/min | |
| Memory |
| Private memory: | 48.81 MB | |
| Private (maximum): | 32.94 MB | |
| Private (minimum): | 2.04 MB | |
| Non-paged memory: | 48.81 MB | |
| Virtual memory: | 176.32 MB | |
| Virtual memory (peak): | 180.85 MB | |
| Working set: | 5.41 MB | |
| Working set (peak): | 51.01 MB | |
| Resource allocations |
| Threads: | 11 | |
| Handles: | 339 | |
| GUI GDI count: | 158 | |
| GUI GDI peak: | 162 | |
| GUI USER count: | 50 | |
| GUI USER peak: | 52 | |
Process properties
| Integrety level: | Medium |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\checkpoint\zonealarm\zatray.exe" |
| Owner: | User |
Threads
Averages
| zatray.exe (main module) |
| Total CPU: | 0.01085440% | |
| Kernel CPU: | 0.00060130% | |
| User CPU: | 0.01025310% | |
| CPU cycles: | 313,420/sec | |
| Context switches: | 1/sec | |
| Memory: | 80 KB | |
| ntdll.dll |
| Total CPU: | 0.00386064% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00386064% | |
| CPU cycles: | 26,578/sec | |
| Context switches: | 18/sec | |
| Memory: | 1.66 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
60.00% |
|
| Windows 7 Ultimate |
11.43% |
|
| Microsoft Windows XP |
8.57% |
|
| Windows 7 Professional |
5.71% |
|
| Windows Vista Home Premium |
2.86% |
|
| Windows Vista Home Basic |
2.86% |
|
| Windows 8 Pro |
2.86% |
|
| Windows 7 Ultimate N |
2.86% |
|
| Windows Vista Ultimate |
2.86% |
|
Distribution by country
United States installs about 60.00% of ZoneAlarm.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
40.00% |
|
| Sony |
20.00% |
|
| Hewlett-Packard |
20.00% |
|
| Sahara |
10.00% |
|
| Toshiba |
10.00% |
|
