home

PHTRAY.EXE

Proxy Host

Funk Software, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ProxyHostTrayIcon’.
Publisher:
Funk Software, Inc.  (signed and verified)

Product:
Proxy Host

Description:
PROXY: Tray Icon

Version:
4.10.4.738

MD5:
8f18db2b80d84cad7b5afdafe43e49d0

SHA-1:
b09575981aa0b76b6de815ddd1adc28459b717a8

SHA-256:
87ec4f5a1f484a063050c57ddfeabb6510416f2ed4662c789d70feac504440a8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 7:46:58 AM UTC  (today)

File size:
225 KB (230,360 bytes)

Product version:
4.10.4.738

Copyright:
Copyright © 1999-2002 Funk Software, Inc. All rights reserved.

Original file name:
PHTRAY.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\funk software\proxy host\phtray.exe

Digital Signature
Signed by:
Funk Software, Inc.

Authority:
VeriSign, Inc.

Valid from:
10/6/2003 1:00:00 AM

Valid to:
10/17/2004 12:59:59 AM

Subject:
CN="Funk Software, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Funk Software, Inc.", L=Cambridge, S=MA, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2001 CA, OU=Terms of use at https://www.verisign.com/rpa (c)01, OU=VeriSign Trust Network, O="VeriSign, Inc."

Serial number:
618DCF6DCCEA9F3ED0D77C994750809A

File PE Metadata
Compilation timestamp:
10/22/2003 6:42:56 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:RjnaD2jAkIhGHX5SB7EgQjWMvTeqlqeXF0lToMddI6Fkkm79:RjnaCjAkIhGHX5SB7EgQjWMvTHYeXkvy

Entry address:
0x2C4FC

Entry point:
55, 8B, EC, 6A, FF, 68, 40, EC, 42, 00, 68, 82, C6, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 78, E3, 42, 00, 59, 83, 0D, A0, 67, 43, 00, FF, 83, 0D, A4, 67, 43, 00, FF, FF, 15, 74, E3, 42, 00, 8B, 0D, 74, 67, 43, 00, 89, 08, FF, 15, 68, E3, 42, 00, 8B, 0D, 70, 67, 43, 00, 89, 08, A1, 70, E3, 42, 00, 8B, 00, A3, 9C, 67, 43, 00, E8, 4A, 01, 00, 00, 39, 1D, 18, 53, 43, 00, 75, 0C, 68, B2, C6, 42, 00, FF, 15, 6C, E3...
 
[+]

Entropy:
5.9712

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
180 KB (184,320 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ProxyHostTrayIcon

Command:
"C:\Program Files\funk software\proxy host\phtray.exe"


Scan PHTRAY.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.