home

MPFTRAY.EXE

McAfee Personal Firewall (MPF)

McAfee, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘MPFExe’.
Publisher:
McAfee Security  (signed by McAfee, Inc.)

Product:
McAfee Personal Firewall (MPF)

Description:
McAfee Personal Firewall Tray Monitor

Version:
7.1.0.117

MD5:
36ef4572a189da57fe8812168e125705

SHA-1:
0f6cc54474aab11dbff2237bd0e2231a0f934d6c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 4:16:46 PM UTC  (today)

File size:
981.5 KB (1,005,096 bytes)

Product version:
7.1.0.117

Copyright:
Copyright © 2005 McAfee, Inc. All Rights Reserved.

Original file name:
MPFTRAY.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\mcafee.com\personal firewall\mpftray.exe

Digital Signature
Signed by:
McAfee, Inc.

Authority:
VeriSign, Inc.

Valid from:
9/21/2005 9:00:00 AM

Valid to:
10/9/2006 8:59:59 AM

Subject:
CN="McAfee, Inc.", OU=IIS, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="McAfee, Inc.", L=Santa Clara, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
02FDE872EC2A7732EB10561F4BA15F2C

File PE Metadata
Compilation timestamp:
5/11/2006 11:11:54 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

Entry address:
0x7C39E

Entry point:
6A, 60, 68, A8, 09, 4D, 00, E8, F6, 0F, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, DA, B0, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, C8, 74, 4B, 00, 8B, 4E, 10, 89, 0D, 6C, AE, 4F, 00, 8B, 46, 04, A3, 78, AE, 4F, 00, 8B, 56, 08, 89, 15, 7C, AE, 4F, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 70, AE, 4F, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 70, AE, 4F, 00, C1, E0, 08, 03, C2, A3, 74, AE, 4F, 00, 33, F6, 56, 8B, 3D, EC, 73, 4B, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03...
 
[+]

Entropy:
6.5486

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
728 KB (745,472 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
MPFExe

Command:
C:\Program Files1\mcafee.com\person~1\mpftray.exe


Scan MPFTRAY.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.