home

oawTray.exe

officeatwork System Tray

officeatwork Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘officeatwork’.
Publisher:
officeatwork Ltd.  (signed and verified)

Product:
officeatwork System Tray

Version:
4.00.1325

MD5:
3489831bb547f5789ef0c6202e5fe91e

SHA-1:
b9db460db85b60bce93f069759cafec0a01910a2

SHA-256:
79b6ce5d6bda75404954dda9c524a3ccc8a25fb49fda31de02966c7005883609

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:40:16 PM UTC  (today)

File size:
149.3 KB (152,920 bytes)

Product version:
4.00.1325

Copyright:
© 1999 - 2011 officeatwork Ltd.

Trademarks:
All rights reserved.

Original file name:
oawTray.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\officeatwork\common\oawtray.exe

Digital Signature
Signed by:
officeatwork Ltd.

Authority:
VeriSign, Inc.

Valid from:
1/4/2010 1:00:00 AM

Valid to:
1/5/2013 12:59:59 AM

Subject:
CN=officeatwork Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=officeatwork Ltd., L=Zug, S=Zug, C=CH

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0D223A63164EE9D8C04D5BC2412F5C5B

File PE Metadata
Compilation timestamp:
8/19/2011 2:26:27 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x229C

Entry point:
68, 60, 24, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 58, 00, 00, 00, 38, 00, 00, 00, 3C, 47, FE, 7D, FC, F0, DE, 46, 81, 74, 31, BB, 1A, 47, 48, 95, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 74, 20, 38, 2E, 30, 20, 6F, 61, 77, 54, 72, 61, 79, 00, 6F, 66, 66, 69, 63, 65, 61, 74, 77, 6F, 72, 6B, 20, 53, 79, 73, 74, 65, 6D, 20, 54, 72, 61, 79, 00, 32, 30, 39, 30, 35, 2D, 30, 00, 00, 00, 00, 01, 00, 05, 00, 9C, 3D, 40, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00...
 
[+]

Entropy:
5.7913

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
128 KB (131,072 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
officeatwork

Command:
C:\Program Files\officeatwork\common\oawtray.exe


Scan oawTray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.