home

oacat.exe

Online Armor Firewall

Tall Emu

It runs as a separate (within the context of its own process) windows Service named “Online Armor Helper Service”.
Publisher:
Tall Emu  (signed and verified)

Product:
Online Armor Firewall

Description:
Online Armor Component

Version:
4.0.0.35

MD5:
4b64c2c27ddd6a6923ed7f7765d2f2df

SHA-1:
07f8aa07713ddc5169b6b1ede099af43045d9f98

SHA-256:
505c373da6c5687234b5e7a7cd94316ac48f00a7025bfdf65af10db38ecf647c

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 8:46:33 AM UTC  (today)

Scan engine
Detection
Engine version

McAfee
Artemis!4B64C2C27DDD
5600.7134

File size:
1.2 MB (1,284,600 bytes)

Product version:
4.0.0.35

Copyright:
Tall Emu 2004-2010

File type:
Executable application (Win32 EXE)

Language:
English

Digital Signature
Signed by:
Tall Emu

Authority:
GlobalSign nv-sa

Valid from:
2/25/2010 11:12:52 PM

Valid to:
2/26/2011 11:12:49 PM

Subject:
E=support@tallemu.com, CN=Tall Emu, O=Tall Emu, L=Sydney, S=NSW, C=AU

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
01000000000127075A2E98

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:0Wvc//////ATPnb44PTGbu8rvWqVqIAZnyKDPVofGhZoaVxhfx53qpU5:Nc//////WbpPTG9KzJ2adf/3qM

Entry address:
0x10E1DC

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 6C, DC, 50, 00, E8, 2F, 8E, EF, FF, E8, F6, 7A, FF, FF, E8, 5D, E8, F4, FF, E8, 4C, E1, FF, FF, E8, 53, 7A, FF, FF, 80, 78, 38, 00, 75, 3C, E8, 48, 7A, FF, FF, BA, 18, 00, 00, 00, E8, B6, 79, FF, FF, E8, 39, 7A, FF, FF, BA, 58, E2, 50, 00, E8, 2B, 71, FF, FF, E8, 4A, 9A, FA, FF, E8, 8D, 99, FA, FF, 8B, D8, E8, 1E, 7A, FF, FF, 88, 58, 38, E8, 16, 7A, FF, FF, E8, B9, 66, FF, FF, E8, C4, ED, FF, FF, 5B, E8, 7E, 66, EF, FF, 00, 00, FF, FF, FF, FF, 2B, 00, 00, 00, 5B, 25, 54, 49...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1.1 MB (1,102,848 bytes)

Service
Display name:
Online Armor Helper Service

Service name:
OAcat

Type:
Win32OwnProcess

Group:
NetBIOSGroup

Depends on:
RPCSS


Scan oacat.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.