» OrbLauncher.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

OrbLauncher.exe

Orb

Orb Networks

It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in. This is installed with Orb.

File name:

OrbLauncher.exe

Publisher:

Orb Networks (signed and verified)

Product:

Orb

Description:

OrbLauncher

Version:

2, 2011, 0, 1

MD5:

e2f52e6758357771a0bdc42f7bed82ef

SHA-1:

5205e3b623b864734f377bcd7116d5891012d386

SHA-256:

4f58745c1475eed575bd95e61418fc25b90e0f63f0c2da3f04bf9a98e4cf536d

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/20/2024 1:47:42 AM UTC (today)

File size:

1.1 MB (1,131,000 bytes)

Product version:

2, 2011, 0, 1

Original file name:

OrbLauncher.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\orb networks\orb\bin\orblauncher.exe

Digital Signature

Signed by:

Orb Networks

Authority:

VeriSign, Inc.

Valid from:

10/3/2011 7:00:00 PM

Valid to:

11/23/2012 5:59:59 PM

Subject:

CN=Orb Networks, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Orb Networks, L=Oakland, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

63C468B19F2152020D86B531B229156D

File PE Metadata

Compilation timestamp:

7/2/2012 11:52:44 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:6mCaob1ZpAM2kc+Qyr6e7sDnVbH0CaCRfz+7aupd3uKp+ZeLAUbdnhzs+mvLYj0f:sOe7hBaugZeLXzs+mvLYj0yGcIz9

Entry address:

0x3AD79

Entry point:

E8, 6A, 07, 00, 00, E9, 36, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 53, 57, 33, FF, 8B, 44, 24, 10, 0B, C0, 7D, 14, 47, 8B, 54, 24, 0C, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 10, 89, 54, 24, 0C, 8B, 44, 24, 18, 0B, C0, 7D, 13, 8B, 54, 24, 14, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 18, 89, 54, 24, 14, 0B, C0, 75, 1B, 8B, 4C, 24, 14, 8B, 44, 24, 10, 33, D2, F7, F1, 8B, 44, 24, 0C, F7, F1, 8B, C2, 33, D2, 4F, 79, 4E, EB, 53, 8B, D8, 8B, 4C, 24, 14, 8B, 54, 24, 10, 8B, 44, 24, 0C, D1... 
[+]

Entropy:

6.6708

Code size:

268 KB (274,432 bytes)

Scheduled Task

Task name:

Orb auto start

Trigger:

Logon (Runs on logon)

The file OrbLauncher.exe has been discovered within the following program.

Orb by Orb Networks

Publisher's description - “Orb provides the ability to MyCast. MyCasting gives the user instant access to photos, music, videos, live television, and other digital content on their home PC at anytime and from any internet-connected device, such as a mobile phone, PDA or laptop.”

www.orb.com

11% remove it

Scan OrbLauncher.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.