home

ormon.exe

CyberCafePro helper thread

OneRoof Inc.

Publisher:
OneRoof, Inc.  (signed by OneRoof Inc.)

Product:
CyberCafePro helper thread

Description:
Helper application for CyberCafePro Client

Version:
6.01.0331

MD5:
940c16a78940c54ee360a9ce723ba7c7

SHA-1:
192b154fe82ad4b63387bfd05bbea5f420ba1494

SHA-256:
98b68c9c8fbaa5b32164a298932e2474aab4afd111f644c5a87e53ec26d93a51

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 8:21:39 PM UTC  (today)

File size:
283.3 KB (290,096 bytes)

Product version:
6.01.0331

Copyright:
OneRoof Inc./CyberCafePro Inc.

Trademarks:
OneRoof/CyberCafePro

Original file name:
OneRoofURLTracker.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\cybercafepro server\ormon.exe

Digital Signature
Signed by:
OneRoof Inc.

Authority:
GoDaddy.com, Inc.

Valid from:
2/29/2012 10:51:43 PM

Valid to:
2/27/2013 12:52:48 PM

Subject:
CN=OneRoof Inc., O=OneRoof Inc., L=Kensington, S=CA, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
4B082F2D4D2503

File PE Metadata
Compilation timestamp:
11/15/2012 2:47:27 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:jAA6nQHh5eda/stLH0mkz+/3TjUUnXANn1J6WYgSh5ekY46:jR4QHhJktez+fTjlXAn4hhjY4

Entry address:
0x2484

Entry point:
68, 78, A2, 41, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, 19, FD, 83, 16, F8, D0, 63, 49, B3, 72, 0D, 2A, 21, 8E, 71, D2, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 08, 5D, 3A, 01, 50, 48, 65, 6C, 70, 65, 72, 00, 00, 00, 00, 00, FF, CC, 31, 00, 05, 25, 28, AD, A3, ED, B7, 0F, 47, 85, D3, F7, AB, 33, 42, C2, FA, D2, 3A, 63, 2B, 9A, 80, 96, 40, 9D, FD, 66, 3B, A2, 28, 8C, 2A, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00, AA, 00, 60, D3, 93, 00, 00, 00...
 
[+]

Entropy:
5.5395

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
176 KB (180,224 bytes)

Scan ormon.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.