home

osmtray.exe

WSM Client

Wyse Technology Inc

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘OSMTray’.
Publisher:
Wyse Technology Inc.  (signed by Wyse Technology Inc)

Product:
WSM Client

Description:
WSM Virtual Disk Status Monitor

Version:
5.0.1.10659

MD5:
8f93ba1a0eb7b6e04ca53999be370ff9

SHA-1:
e749e5976d5a40933fc75e140b5a1d70906d9855

SHA-256:
9d732c02ad31620f0ab1f29593212914a06beaa902920d7db5d43bd01c80170c

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/23/2024 4:18:48 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Trash.Gen
7.11.30.172

F-Prot
W32/SelfStarterInternetTrojan!M
4.6.5.141

File size:
79.9 KB (81,792 bytes)

Product version:
5.0.1.10659

Copyright:
Copyright © 2005-2011 Wyse Technology Inc.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\wyse\wsm\os\osmtray.exe

Digital Signature
Signed by:
Wyse Technology Inc

Authority:
VeriSign, Inc.

Valid from:
9/16/2012 8:00:00 PM

Valid to:
9/17/2013 7:59:59 PM

Subject:
CN=Wyse Technology Inc, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Wyse Technology Inc, O=Wyse Technology Inc, L=San Jose, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0771F240FB28B143EAAB7F12409D9532

File PE Metadata
Compilation timestamp:
12/20/2012 8:02:20 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:ubdrgJSshHeyC7SjOu7QV9mZxRu7e5PjI:u9ggsRFjOu7QVwZ67ee

Entry address:
0x7351

Entry point:
E8, 34, 04, 00, 00, E9, 1C, FD, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 38, DD, 40, 00, 89, 0D, 34, DD, 40, 00, 89, 15, 30, DD, 40, 00, 89, 1D, 2C, DD, 40, 00, 89, 35, 28, DD, 40, 00, 89, 3D, 24, DD, 40, 00, 66, 8C, 15, 50, DD, 40, 00, 66, 8C, 0D, 44, DD, 40, 00, 66, 8C, 1D, 20, DD, 40, 00, 66, 8C, 05, 1C, DD, 40, 00, 66, 8C, 25, 18, DD, 40, 00, 66, 8C, 2D, 14, DD, 40, 00, 9C, 8F, 05, 48, DD, 40, 00, 8B, 45, 00, A3, 3C, DD, 40, 00, 8B, 45, 04, A3, 40, DD, 40, 00, 8D, 45, 08, A3, 4C, DD, 40...
 
[+]

Entropy:
6.0245

Code size:
29 KB (29,696 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
OSMTray

Command:
C:\Program Files\wyse\wsm\os\osmtray.exe -autorun


Scan osmtray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.