home

adtray.exe

Transition Media Group LLC

It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in.
Publisher:
Transition Media Group LLC  (signed and verified)

MD5:
0b441b8d8dc0be5ca8b4318db75f807a

SHA-1:
d63e27e53cebbbcf0a8e05091a2fee54b5dbddc8

SHA-256:
9686907173e010c5b63fa94fe23c60ec055451d39b92b90aeee901ec7cfdbb96

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/13/2025 5:26:28 PM UTC  (today)

File size:
1.1 MB (1,169,512 bytes)

File type:
Executable application (Win32 EXE)

Language:
Greek (Greece)

Common path:
C:\Program Files\arma9 driver assist\adtray.exe

Digital Signature
Signed by:
Transition Media Group LLC

Authority:
COMODO CA Limited

Valid from:
2/15/2015 7:00:00 PM

Valid to:
2/16/2016 6:59:59 PM

Subject:
CN=Transition Media Group LLC, OU=ARMA9, O=Transition Media Group LLC, STREET="1863 Pioneer Pkwy E Ste # 222", L=Springfield, S=OR, PostalCode=97477, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
6129A032E52DB229372562D743FB6499

File PE Metadata
Compilation timestamp:
2/18/2015 11:55:50 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:dYuhqFqrIMQQ3cEqVkTNmgyQ2hBFSZJcAkNc2Cik79TCx37t1w:+oFoBHSfSNc2CikpTCx35K

Entry address:
0xDEEC0

Entry point:
55, 8B, EC, 83, C4, EC, 33, C0, 89, 45, EC, B8, A8, 85, 4D, 00, E8, 1B, B6, F2, FF, 33, C0, 55, 68, 92, EF, 4D, 00, 64, FF, 30, 64, 89, 20, 8D, 55, EC, B8, 01, 00, 00, 00, E8, 14, 58, F2, FF, 8B, 45, EC, BA, AC, EF, 4D, 00, E8, 5B, 87, F2, FF, 75, 2A, 68, C4, EF, 4D, 00, 6A, 00, 68, 01, 00, 1F, 00, E8, 3C, CA, F2, FF, 85, C0, 75, 68, 68, C4, EF, 4D, 00, 6A, 00, 6A, 00, E8, 8E, C7, F2, FF, E8, A5, 8F, FF, FF, EB, 53, 68, E4, EF, 4D, 00, 6A, 00, 68, 01, 00, 1F, 00, E8, 12, CA, F2, FF, 85, C0, 75, 3E, 68, E4...
 
[+]

Entropy:
6.5097

Developed / compiled with:
Microsoft Visual C++

Code size:
886 KB (907,264 bytes)

Scheduled Task
Task name:
Arma9 Driver Assist Schedule

Trigger:
Logon (Runs on logon)


Scan adtray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.