home

OrbTray.exe

Orb

Orb Networks, Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Orb’. This is installed with Orb.
Publisher:
Orb Networks  (signed by Orb Networks, Inc.)

Product:
Orb

Version:
2, 2007, 607, 1800

MD5:
e9bacd2f607c58e2f4b40b4aabc040f5

SHA-1:
0d137c92b87fb0b00820557b10413969dec07d4d

SHA-256:
af99d319fb422c8e3122ea7dede8fba6206520c756d03b6fb2469ab55fb66700

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 4:42:25 PM UTC  (today)

File size:
303.2 KB (310,520 bytes)

Product version:
2, 0, 0, 0

Copyright:
Copyright © 2002-2007

Original file name:
OrbTray.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\orb networks\orb\bin\orbtray.exe

Digital Signature
Signed by:
Orb Networks, Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
5/4/2007 4:30:00 AM

Valid to:
5/17/2009 4:29:59 AM

Subject:
CN="Orb Networks, Inc.", OU=SECURE APPLICATION DEVELOPMENT, O="Orb Networks, Inc.", L=Emeryville, S=California, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
6AE949B1490AD9FD03E24D84F404CB7F

File PE Metadata
Compilation timestamp:
6/8/2007 2:32:13 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:jlozHerkBILp4ShDzsJ/bOo9L4MZjZCNOieXThe:KzHerZFhy/bz98MZj1The

Entry address:
0x2791F

Entry point:
E8, B2, 03, 00, 00, E9, 36, FD, FF, FF, CC, CC, CC, 68, 0A, 75, 42, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 98, 5C, 43, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 70, 8F, 43, 00, 89, 0D, 6C, 8F, 43, 00, 89, 15, 68, 8F, 43, 00...
 
[+]

Entropy:
6.3107

Code size:
164 KB (167,936 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Orb

Command:
"C:\Program Files\orb networks\orb\bin\orbtray.exe" \background


The file OrbTray.exe has been discovered within the following program.

Orb  by Orb Networks
Publisher's description - “Orb provides the ability to MyCast. MyCasting gives the user instant access to photos, music, videos, live television, and other digital content on their home PC at anytime and from any internet-connected device, such as a mobile phone, PDA or laptop.”
www.orb.com
11% remove it
 
Powered by Should I Remove It?

Scan OrbTray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.