home

iptray.exe

Intel Desktop Utilities

Intel Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ipTray.exe’.
Publisher:
Intel(R) Corporation  (signed by Intel Corporation)

Product:
Intel(R) Desktop Utilities

Description:
Tray application for Intel(R) Desktop Utilities

Version:
3.0.16.82

MD5:
d2934640b7607364623be16753d99f4d

SHA-1:
69388374569714838aa547dfc4b4005391596732

SHA-256:
ea9ed4be29ee060199e9eb6e2ae9e4cdba0402e92287f2d482fa107f6e0d9075

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/11/2024 4:47:42 AM UTC  (today)

File size:
1.6 MB (1,656,496 bytes)

Product version:
3.0.16.82

Copyright:
Copyright 2008 Intel(R) Corporation

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Intel Corporation

Authority:
Intel Corporation

Valid from:
11/25/2008 2:39:57 AM

Valid to:
11/25/2011 2:39:57 AM

Subject:
CN=Intel Channel Products Group, O=Intel Corporation

Issuer:
CN=Intel External Basic Issuing CA 3A, O=Intel Corporation, C=US

Serial number:
48FE0650000000002A94

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:YuD90ELr9+MQ9xGbMj07kPy0xkontw3ejDYwXSy0:YuNLr0MQKuHPntw3ejDYwXL0

Entry address:
0x10C53C

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 94, C1, 50, 00, E8, EF, AD, EF, FF, A1, 08, EE, 50, 00, 83, 38, 05, 75, 0D, E8, E0, A3, F7, FF, 3C, 01, 0F, 84, C2, 00, 00, 00, B1, 01, BA, 34, C6, 50, 00, B8, 4C, C6, 50, 00, E8, 3B, A2, F7, FF, 84, C0, 0F, 85, A9, 00, 00, 00, 33, DB, EB, 0B, 68, E8, 03, 00, 00, E8, 5D, 30, F0, FF, 43, BA, 80, C6, 50, 00, 33, C0, E8, 3C, 86, FF, FF, 84, C0, 75, 05, 83, FB, 3C, 7C, E0, A1, D8, EF, 50, 00, 8B, 00, E8, 0B, 3F, F6, FF, A1, D8, EF, 50, 00, 8B, 00, BA, 4C, C6, 50, 00, E8, E2, 3A...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1 MB (1,095,680 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ipTray.exe

Command:
"C:\winappl\system\motherboard\intel desktop utilities\iptray.exe"


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.