home

fomflex.exe

OfficeMaster Flex

Ferrari electronic AG

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘OfficeMaster Flex’.
Publisher:
Ferrari electronic AG  (signed and verified)

Product:
OfficeMaster Flex

Description:
OfficeMaster Flex, Client application for OfficeMaster Messaging Server

Version:
1, 0, 5, 1

MD5:
2f6e32150159ac85341e755047ef3499

SHA-1:
397ead37da10859594bae82422347dd984d04a98

SHA-256:
fdb11ec11c216ca7727a6cb5f481f142946e631a27c33514c30d40729eea0c57

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/1/2025 10:39:34 AM UTC  (today)

File size:
3.9 MB (4,101,384 bytes)

Product version:
1, 0, 5, 1

Copyright:
Copyright ©Ferrari electronic AG 2004-2009

Trademarks:
OfficeMaster

Original file name:
fomflex.exe

File type:
Executable application (Win32 EXE)

Language:
English

Common path:
C:\Program Files\ffums\omflex\fomflex.exe

Digital Signature
Signed by:
Ferrari electronic AG

Authority:
VeriSign, Inc.

Valid from:
12/19/2006 1:00:00 AM

Valid to:
1/6/2010 12:59:59 AM

Subject:
CN=Ferrari electronic AG, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Ferrari electronic AG, L=Teltow, S=Brandenburg, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1E732ADADAD065F1A2332114F15C0F74

File PE Metadata
Compilation timestamp:
11/24/2009 1:41:44 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:7gTkGxxFxncS21PU+lrGMo4kWhPvw57QUQ:8Ttv2WMoRPM

Entry address:
0x2126F3

Entry point:
E8, B0, 06, 00, 00, E9, DD, FC, FF, FF, CC, FF, 25, C0, 32, 65, 00, FF, 25, BC, 32, 65, 00, FF, 25, B8, 32, 65, 00, FF, 25, B4, 32, 65, 00, FF, 25, B0, 32, 65, 00, FF, 25, AC, 32, 65, 00, FF, 25, A8, 32, 65, 00, FF, 25, A4, 32, 65, 00, FF, 25, A0, 32, 65, 00, FF, 25, 9C, 32, 65, 00, FF, 25, 98, 32, 65, 00, FF, 25, 94, 32, 65, 00, FF, 25, 90, 32, 65, 00, FF, 25, 8C, 32, 65, 00, FF, 25, 88, 32, 65, 00, FF, 25, 84, 32, 65, 00, FF, 25, 80, 32, 65, 00, FF, 25, 7C, 32, 65, 00, FF, 25, 78, 32, 65, 00, FF, 25, 74...
 
[+]

Code size:
2.3 MB (2,433,024 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
OfficeMaster Flex

Command:
C:\Program Files2\ffums\omflex\fomflex.exe


Scan fomflex.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.