home

omclient.exe

Orange Cloud

Funambol Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Orange Cloud Client’.
Publisher:
Orange-Romania  (signed by Funambol Inc.)

Product:
Orange Cloud

Version:
1.0.8

MD5:
fa331573048447aed3e3512edb00010c

SHA-1:
c4e2216c5607959efb29e3496d44794d4d6f39ff

SHA-256:
60287444dc74d96ea4c865a550948930c603e89d46c07f90d689c3d4b1e9cb0d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 7:57:20 AM UTC  (today)

File size:
1.1 MB (1,177,376 bytes)

Product version:
1.0.8

Copyright:
Copyright © 2013 Orange

Original file name:
omclient.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\orange cloud\omclient.exe

Digital Signature
Signed by:
Funambol Inc.

Authority:
VeriSign, Inc.

Valid from:
1/17/2013 2:00:00 AM

Valid to:
1/17/2014 1:59:59 AM

Subject:
CN=Funambol Inc., OU=Operations, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Funambol Inc., L=Foster City, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3C1D0A1FBC3F72E239A158C46E709F98

File PE Metadata
Compilation timestamp:
6/7/2013 11:45:05 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:J/levA70A0tRp0sRageBLFU9hr0LohGlaf080tRs:J/levW0Rt/Ra7xFRt+

Entry address:
0xC83CE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 70, 00, 00, 80, 10, 00, 00, 00, 88, 00, 00, 80, 18, 00, 00, 00, A0, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 06, 00, 02, 00, 00, 00, B8, 00, 00, 80, 03, 00, 00, 00, D0, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
793 KB (812,032 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Orange Cloud Client

Command:
C:\users\{user}\appdata\local\orange cloud\omclient.exe


Scan omclient.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.