FortiTray.exe
Summary
FortiClient System Tray - tray icon and notification interface for FortiClient.
FortiTray.exe is the 598th most commonly executed Windows program in EchoTrail's dataset, observed 7,875 times across enterprise environments. It typically runs from C:\Program Files (x86)\Fortinet\FortiClient and it is most often launched by FCHelper64.exe.
Behavior
Top Paths
- C:\Program Files (x86)\Fortinet\FortiClient97.02%
- C:\Program Files\Fortinet\FortiClient2.98%
Top Hashes (SHA256)
- 37290bc4ffe004f1b77fcd0cda0ef5e406be02e7172d2358e83a195e9ddd074423.17%
- 0369b24af9b229904f3657c29d8ce451d75c20764c865a6ffc1d4faed115cb0317.9%
- e2c2288485c140c868144ec88db59e62f5b6f88627e60393c2d8f81e45184b5a17.34%
- b8cf1045ad92f969679bbf241669762085cb681d0f76a82b1493c30e3c7c1af113.48%
- 1ca138da85b1dcb968ebf8db7b0a1f440209e98a2b350732f52349b18ff11bdd5.65%
- e99bd6d96508eee844ae80210a544eaf51ed7f99f3f7c3e28f0f4ba97d222aa15.46%
- bf7345be51aa8981f1d76d9be032f5f2839296be1f951e072130b6dea12c623f3.1%
- 2512cbc8d81c27a41c59c0e84d2b61691798fd8563a94f5183ca27c806f2cb0b2.68%
- 3925d6c13549e154dd1722399c2a4befb05db1ae50f3aa61f8a8a937a2635ead2.5%
- 25791113fdaeaa33f2080d25b2d863afb31bf742f318a28f867e80addeddb6031.91%
Process Ancestry
Top Grandparents
- svchost.exe96.27%
- services.exe3.26%
- FCHelper64.exe0.47%
Top Parents
- FCHelper64.exe96.46%
- FortiTray.exe0.57%
Top Children
- EPCUserAvatar.exe57.4%
- FortiClient.exe41.76%
- FortiTray.exe0.73%
- verclsid.exe0.05%
- GoogleUpdate.exe0.02%
- WerFault.exe0.02%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about FortiTray.exe
Rocky answers questions about FortiTray.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.