» OrbLauncher.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

OrbLauncher.exe

Orb

Orb Networks

It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in. This file is installed with the program Orb.

File name:

OrbLauncher.exe

Publisher:

Orb Networks (signed and verified)

Product:

Orb

Description:

OrbLauncher

Version:

2, 2011, 0, 1

MD5:

217f1ce58309e31a2fbc84172acfcbd1

SHA-1:

5c59f1562424e8f7637f6fe2efe52c86d812f417

SHA-256:

7f4ccba6efbb0f6a3c68c37ecadb2e1cdac1422d1679502a5829ca6166403a4f

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/18/2024 11:17:21 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

Emsisoft Anti-Malware

Rootkit.Cinmus

8.14.03.23.12

File size:

1.1 MB (1,131,808 bytes)

Product version:

2, 2011, 0, 1

Original file name:

OrbLauncher.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\orb networks\orb\bin\orblauncher.exe

Digital Signature

Signed by:

Orb Networks

Authority:

VeriSign, Inc.

Valid from:

11/26/2012 7:00:00 PM

Valid to:

12/15/2013 6:59:59 PM

Subject:

CN=Orb Networks, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Orb Networks, L=Oakland, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5C716AFD1BC99C85AFABC87176EEB5BE

File PE Metadata

Compilation timestamp:

3/5/2013 7:02:17 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

24576:nOxTiKDhNBau9ZKpWzs+mvLYj0yGF148/:6dhT9ZK5bFu8/

Entry address:

0x3AE59

Entry point:

E8, 6A, 07, 00, 00, E9, 36, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 53, 57, 33, FF, 8B, 44, 24, 10, 0B, C0, 7D, 14, 47, 8B, 54, 24, 0C, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 10, 89, 54, 24, 0C, 8B, 44, 24, 18, 0B, C0, 7D, 13, 8B, 54, 24, 14, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 18, 89, 54, 24, 14, 0B, C0, 75, 1B, 8B, 4C, 24, 14, 8B, 44, 24, 10, 33, D2, F7, F1, 8B, 44, 24, 0C, F7, F1, 8B, C2, 33, D2, 4F, 79, 4E, EB, 53, 8B, D8, 8B, 4C, 24, 14, 8B, 54, 24, 10, 8B, 44, 24, 0C, D1... 
[+]

Entropy:

6.6673

Code size:

268.5 KB (274,944 bytes)

Scheduled Task

Task name:

Orb auto start

Trigger:

Logon (Runs on logon)

Action:

orblauncher.exe --background

The file OrbLauncher.exe has been discovered within the following program.

Orb by Orb Networks

Publisher's description - “Orb provides the ability to MyCast. MyCasting gives the user instant access to photos, music, videos, live television, and other digital content on their home PC at anytime and from any internet-connected device, such as a mobile phone, PDA or laptop.”

www.orb.com

11% remove it

Scan OrbLauncher.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.