home

sessionmanager.exe

Orange Connection Kit

FRANCE TELECOM

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ORAHSSSessionManager’.
Publisher:
France Telecom SA  (signed by FRANCE TELECOM)

Product:
Orange Connection Kit

Version:
05.05.00.00

MD5:
fe03353c38cfa059a50c8b47af538542

SHA-1:
af8da79c6c216a2f8d66545bf037b0a9ce92ce64

SHA-256:
5823e691d70b10d59cfa08687757b0019d5cabb45cbe621485815202430c163b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:56:55 PM UTC  (a few moments ago)

File size:
132.7 KB (135,920 bytes)

Product version:
01.05.00.09324_01

Copyright:
France Telecom SA Copyright (c) 2006

File type:
Executable application (Win32 EXE)

Language:
French (France)

Common path:
C:\Program Files\orange\connexion internet orange\sessionmanager\sessionmanager.exe

Digital Signature
Signed by:
FRANCE TELECOM

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
3/4/2009 5:57:13 PM

Valid to:
3/21/2011 1:45:48 PM

Subject:
CN=FRANCE TELECOM, OU=Provided by TBS INTERNET http://www.tbs-certificats.com/, OU=FRANCE TELECOM RetD - Cesson-Sevigne, O=FRANCE TELECOM, L=Paris, S=PARIS, C=FR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
0CE3B26914C652278D73F03E8AB53BFD

File PE Metadata
Compilation timestamp:
9/2/2009 6:07:47 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

Entry address:
0xDAFD

Entry point:
6A, 74, 68, 68, 49, 41, 00, E8, F3, 01, 00, 00, 33, DB, 89, 5D, E0, 53, 8B, 3D, E8, 20, 41, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03, C8, 81, 39, 50, 45, 00, 00, 75, 12, 0F, B7, 41, 18, 3D, 0B, 01, 00, 00, 74, 1F, 3D, 0B, 02, 00, 00, 74, 05, 89, 5D, E4, EB, 27, 83, B9, 84, 00, 00, 00, 0E, 76, F2, 33, C0, 39, 99, F8, 00, 00, 00, EB, 0E, 83, 79, 74, 0E, 76, E2, 33, C0, 39, 99, E8, 00, 00, 00, 0F, 95, C0, 89, 45, E4, 89, 5D, FC, 6A, 02, FF, 15, B0, 23, 41, 00, 59, 83, 0D, 1C, 99, 41, 00, FF, 83...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
68 KB (69,632 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ORAHSSSessionManager

Command:
"C:\Program Files\orange\connexion internet orange\sessionmanager\sessionmanager.exe"


Scan sessionmanager.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.