» pcftray.exe
Overview
Analysis
File Details
Programs (1)

pcftray.exe

Baidu PC Faster

Baidu Online Network Technology (Beijing)Co., Ltd

This is installed with Baidu PC Faster.

File name:

pcftray.exe

Publisher:

Baidu Inc. (signed by Baidu Online Network Technology (Beijing)Co., Ltd)

Product:

Baidu PC Faster

Description:

PC Faster Tray

Version:

4,0,1,50974

MD5:

d6db60c4b9e08272fcb308fbcc30a1a6

SHA-1:

bbbbac279a87b1db9097dbd6d9adc8a238f370a2

SHA-256:

9d58e639c6dfa3c7c940fd1b84f563fcfe24720faf5c593c8c648c8f3e0794d6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 8:20:50 PM UTC (today)

File size:

1.2 MB (1,292,992 bytes)

Product version:

4,0,1,50974

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\baidu security\pc faster\4.0.0.0\pcftray.exe

Digital Signature

Signed by:

Baidu Online Network Technology (Beijing)Co., Ltd

Authority:

VeriSign, Inc.

Valid from:

4/24/2012 2:00:00 AM

Valid to:

4/25/2015 1:59:59 AM

Subject:

CN="Baidu Online Network Technology (Beijing)Co., Ltd", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Baidu Online Network Technology (Beijing)Co., Ltd", L=Beijing, S=Beijing, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3BDB1994B98BBB19AB55A42337FA4F5C

File PE Metadata

Compilation timestamp:

11/26/2013 9:50:55 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

24576:MvEChqWMAcW784FiQVLUDYyaJvz7Zfnn0BddRX2gElnLlkE:BChqecW148zJvz7Zfnn0BddRX2xlnLln

Entry address:

0x5FF04

Entry point:

E8, DF, CD, 00, 00, E9, 79, FE, FF, FF, CC, CC, 80, F9, 40, 73, 15, 80, F9, 20, 73, 06, 0F, A5, C2, D3, E0, C3, 8B, D0, 33, C0, 80, E1, 1F, D3, E2, C3, 33, C0, 33, D2, C3, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 69, 33, C0, 8A, 44, 24, 08, 84, C0, 75, 16, 81, FA, 00, 01, 00, 00, 72, 0E, 83, 3D, C0, 39, 52, 00, 00, 74, 05, E9, 79, CE, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0, 10, 03... 
[+]

Entropy:

6.4537

Code size:

928 KB (950,272 bytes)

The file pcftray.exe has been discovered within the following program.

Baidu PC Faster by Baidu, Inc.

The software is typically bundled with third party installers such as Open Candy. "Offer your users a free system maintenance and utility suite to help them get the most out of their PC’s performance."

security.baidu.co.th

65% remove it

Scan pcftray.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.