home

F101Tray.exe

Fortres 101

Fortres Grand Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘F101Tray’.
Publisher:
Fortres Grand Corporation  (signed and verified)

Product:
Fortres 101

Description:
Fortres 101 Tray Application

Version:
6.0.2223.4

MD5:
13d786b8da7a38227409550b20a46765

SHA-1:
0cb6705549b01b9ae70e185d01cb5fe121e0a305

SHA-256:
36bd0cc2182c1055712607e2c63999b6f7f751d07b5962cc802786b160b133ef

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 7:53:36 AM UTC  (today)

File size:
205.8 KB (210,720 bytes)

Product version:
6.0.2223.4

Copyright:
Copyright © 2008-2014 Fortres Grand Corporation

Original file name:
F101Tray.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\fortres grand\fortres 101 7\f101tray.exe

Digital Signature
Signed by:
Fortres Grand Corporation

Authority:
GlobalSign nv-sa

Valid from:
3/19/2013 10:04:30 AM

Valid to:
3/19/2016 10:04:30 AM

Subject:
E=trust@fortresgrand.com, CN=Fortres Grand Corporation, O=Fortres Grand Corporation, L=Plymouth, S=IN, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121B11AB04C88D9CA4ABCC9E92D1D4FFEF1

File PE Metadata
Compilation timestamp:
5/28/2014 7:29:37 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:kBU2rjD1+TMkJ1q+k50VIWm4WpmyIdC+rPwVLk0qkw9y5zpl:kBU2rsTMkJ1qCXmnpz5l

Entry address:
0x522C

Entry point:
48, 83, EC, 28, E8, 8F, 44, 00, 00, 48, 83, C4, 28, E9, 52, FE, FF, FF, CC, CC, 33, D2, 44, 8D, 42, 0A, E9, 99, 47, 00, 00, CC, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 48, 8B, D9, 48, 83, F9, E0, 77, 7C, BF, 01, 00, 00, 00, 48, 85, C9, 48, 0F, 45, F9, 48, 8B, 0D, D1, 22, 01, 00, 48, 85, C9, 75, 20, E8, 3F, 39, 00, 00, B9, 1E, 00, 00, 00, E8, D5, 36, 00, 00, B9, FF, 00, 00, 00, E8, E7, F9, FF, FF, 48, 8B, 0D, AC, 22, 01, 00, 4C, 8B, C7, 33, D2, FF, 15, D9, 9E, 00, 00, 48, 8B, F0, 48, 85...
 
[+]

Entropy:
5.9401

Code size:
52.5 KB (53,760 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
F101Tray

Command:
"C:\Program Files\fortres grand\fortres 101 7\f101tray.exe"


Scan F101Tray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.