» OrbLauncher.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

OrbLauncher.exe

Orb

Orb Networks

It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in. This is installed with Orb.

File name:

OrbLauncher.exe

Publisher:

Orb Networks (signed and verified)

Product:

Orb

Description:

OrbLauncher

Version:

2, 2011, 0, 1

MD5:

b71c84b38a4c289fa8d50b505f76de0d

SHA-1:

579856fdc06e0a3d534d5debbc4155ae9e86007c

SHA-256:

aaf5b87073b51eb2889d642cead58f21f0b28114bab4483be3318d974b18e29e

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 4:00:41 AM UTC (today)

File size:

1.1 MB (1,130,968 bytes)

Product version:

2, 2011, 0, 1

Original file name:

OrbLauncher.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\orb networks\orb\bin\orblauncher.exe

Digital Signature

Signed by:

Orb Networks

Authority:

VeriSign, Inc.

Valid from:

10/4/2011 12:00:00 AM

Valid to:

11/23/2012 11:59:59 PM

Subject:

CN=Orb Networks, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Orb Networks, L=Oakland, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

63C468B19F2152020D86B531B229156D

File PE Metadata

Compilation timestamp:

4/25/2012 12:44:13 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:LmCaob1ZpAM2kc+Qyr6etsDnVbH0CaCRfz+7aupd3uKp+ZtLAUbdnhzs+mvLYj0P:dOethBaugZtLXzs+mvLYj0yGcIz1

Entry address:

0x3AD79

Entry point:

E8, 6A, 07, 00, 00, E9, 36, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 53, 57, 33, FF, 8B, 44, 24, 10, 0B, C0, 7D, 14, 47, 8B, 54, 24, 0C, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 10, 89, 54, 24, 0C, 8B, 44, 24, 18, 0B, C0, 7D, 13, 8B, 54, 24, 14, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 18, 89, 54, 24, 14, 0B, C0, 75, 1B, 8B, 4C, 24, 14, 8B, 44, 24, 10, 33, D2, F7, F1, 8B, 44, 24, 0C, F7, F1, 8B, C2, 33, D2, 4F, 79, 4E, EB, 53, 8B, D8, 8B, 4C, 24, 14, 8B, 54, 24, 10, 8B, 44, 24, 0C, D1... 
[+]

Entropy:

6.6707

Code size:

268 KB (274,432 bytes)

Scheduled Task

Task name:

Orb auto start

Trigger:

Logon (Runs on logon)

The file OrbLauncher.exe has been discovered within the following program.

Orb by Orb Networks

Publisher's description - “Orb provides the ability to MyCast. MyCasting gives the user instant access to photos, music, videos, live television, and other digital content on their home PC at anytime and from any internet-connected device, such as a mobile phone, PDA or laptop.”

www.orb.com

11% remove it

Scan OrbLauncher.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.