home

oacat.exe

Online Armor Firewall

Tall Emu

It runs as a separate (within the context of its own process) windows Service named “Online Armor Helper Service”.
Publisher:
Tall Emu  (signed and verified)

Product:
Online Armor Firewall

Description:
Online Armor Component

Version:
4.0.0.44

MD5:
27e83f14ae20f92ed7c30e840d71e23d

SHA-1:
08e818c73705f88ef86a9264aefeeccbbbc3da9d

SHA-256:
d2f9296bb22c6e0255118b53321da1a79ba0a1ce4e4af74c05f47845b973fe31

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/27/2024 9:56:04 PM UTC  (today)

Scan engine
Detection
Engine version

McAfee
Artemis!27E83F14AE20
5600.6450

File size:
1.2 MB (1,284,600 bytes)

Product version:
4.0.0.44

Copyright:
Tall Emu 2004-2010

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\Program Files\tall emu\online armor\oacat.exe

Digital Signature
Signed by:
Tall Emu

Authority:
GlobalSign nv-sa

Valid from:
2/25/2010 11:12:52 PM

Valid to:
2/26/2011 11:12:49 PM

Subject:
E=support@tallemu.com, CN=Tall Emu, O=Tall Emu, L=Sydney, S=NSW, C=AU

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
01000000000127075A2E98

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:FWvc//////4T/3b84PTi3wsrzmyQqIEQnyK2I6EChJZ1axPZ1hLx53qiBS:gc//////+r9PTivGGLtSlL/3qP

Entry address:
0x10E2C4

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 54, DD, 50, 00, E8, 47, 8D, EF, FF, E8, 7A, E7, F4, FF, E8, F1, 7A, FF, FF, E8, 4C, E1, FF, FF, E8, 13, E9, FA, FF, 80, 78, 38, 00, 75, 3C, E8, 08, E9, FA, FF, BA, 18, 00, 00, 00, E8, 76, E8, FA, FF, E8, F9, E8, FA, FF, BA, 40, E3, 50, 00, E8, EB, DF, FA, FF, E8, 56, CA, FA, FF, E8, 99, C9, FA, FF, 8B, D8, E8, DE, E8, FA, FF, 88, 58, 38, E8, D6, E8, FA, FF, E8, BD, D4, FA, FF, E8, C4, ED, FF, FF, 5B, E8, 96, 65, EF, FF, 00, 00, FF, FF, FF, FF, 2B, 00, 00, 00, 5B, 25, 54, 49...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1.1 MB (1,102,848 bytes)

Service
Display name:
Online Armor Helper Service

Service name:
OAcat

Type:
Win32OwnProcess

Group:
NetBIOSGroup

Depends on:
RPCSS


Scan oacat.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.