home

oawTray.exe

officeatwork System Tray

officeatwork Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘officeatwork’.
Publisher:
officeatwork Ltd.  (signed and verified)

Product:
officeatwork System Tray

Version:
3.10.1308

MD5:
d10b14591cb6ea24ebc86108e2b5ff0d

SHA-1:
1ddaf233d379dfd4050a1eebdefa8fb70128c399

SHA-256:
b61d427f8a0ddfe6070c9c215ecdae598500df83928e98898e55a7a6b96434c7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 7:47:51 AM UTC  (today)

File size:
145.3 KB (148,824 bytes)

Product version:
3.10.1308

Copyright:
© 1999 - 2010 officeatwork Ltd.

Trademarks:
All rights reserved.

Original file name:
oawTray.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\officeatwork\common\oawtray.exe

Digital Signature
Signed by:
officeatwork Ltd.

Authority:
VeriSign, Inc.

Valid from:
1/4/2010 7:00:00 AM

Valid to:
1/5/2013 6:59:59 AM

Subject:
CN=officeatwork Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=officeatwork Ltd., L=Zug, S=Zug, C=CH

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0D223A63164EE9D8C04D5BC2412F5C5B

File PE Metadata
Compilation timestamp:
9/6/2010 8:52:30 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:ZKOzoDpkVKMnCXhzlbGF0zISayMrsn1ul5P4kztTofPAkkWczP2TQPuv03MBU+0B:UOIKVCXhz78/HPPBziC2sPuvgy7v4YUr

Entry address:
0x22A0

Entry point:
68, 64, 24, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 58, 00, 00, 00, 38, 00, 00, 00, 21, C8, 23, AF, CA, D5, 58, 4C, A6, 21, 90, A7, A8, 82, A5, 4C, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 76, 65, 6C, 20, 3E, 3D, 6F, 61, 77, 54, 72, 61, 79, 00, 6F, 66, 66, 69, 63, 65, 61, 74, 77, 6F, 72, 6B, 20, 53, 79, 73, 74, 65, 6D, 20, 54, 72, 61, 79, 00, 20, 41, 78, 43, 73, 54, 72, 00, 00, 00, 00, 01, 00, 05, 00, 3C, 3D, 40, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00...
 
[+]

Entropy:
5.8070

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
124 KB (126,976 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
officeatwork

Command:
C:\Program Files\officeatwork\common\oawtray.exe


Scan oawTray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.