home

360tray.exe

Qizhi Software (beijing) Co. Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘360Safetray’.
Publisher:
360安全中心  (signed by Qizhi Software (beijing) Co. Ltd)

Description:
360安全卫士实时保护模块

Version:
6, 0, 1, 1005

MD5:
44f3bc32ccb85ca98682630472aeb055

SHA-1:
15c4a6960947f7b8a59d540c4d1f942e99e94e41

SHA-256:
f8100ff603653ebb60fc0c1e9ebca97671485037272a7cb50206c3208a465f70

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 8:19:39 PM UTC  (today)

File size:
561.5 KB (574,976 bytes)

Product version:
6, 0, 1, 1005

Copyright:
版权所有 (C) 2008 360.cn

Original file name:
360tray.exe

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, PRC)

Common path:
C:\Program Files\360\360safe\safemon\360tray.exe

Digital Signature
Signed by:
Qizhi Software (beijing) Co. Ltd

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
10/21/2008 8:00:00 PM

Valid to:
11/23/2010 6:59:59 PM

Subject:
CN=Qizhi Software (beijing) Co. Ltd, OU=SECURE APPLICATION DEVELOPMENT, O=Qizhi Software (beijing) Co. Ltd, L=Beijing, S=Beijing, C=CN

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
21D91D915F64FE5AEAA16DD9B46F06DD

File PE Metadata
Compilation timestamp:
10/23/2009 10:10:56 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x28758

Entry point:
55, 8B, EC, 6A, FF, 68, 20, FB, 44, 00, 68, 60, 89, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, 5F, 57, FF, 15, 9C, C6, 44, 00, 59, 83, 0D, 08, 5A, 46, 00, FF, 83, 0D, 0C, 5A, 46, 00, FF, FF, 15, 98, C6, 44, 00, 8B, 0D, 54, 4A, 46, 00, 89, 08, FF, 15, 94, C6, 44, 00, 8B, 0D, 50, 4A, 46, 00, 89, 08, A1, 90, C6, 44, 00, 8B, 00, A3, 04, 5A, 46, 00, E8, 5C, 03, 00, 00, 39, 1D, 08, F7, 45, 00, 75, 0C, 68, 22, 8B, 42, 00, FF, 15...
 
[+]

Entropy:
6.5397

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
300 KB (307,200 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
360Safetray

Command:
"C:\Program Files\360\360safe\safemon\360tray.exe" \start


Scan 360tray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.