home

Prism.Oxygen.exe

Prism

SiSense Ltd.

It runs as a separate (within the context of its own process) windows Service named “Prism.Oxygen”.
Publisher:
Sisense  (signed by SiSense Ltd.)

Product:
Prism

Description:
Sisense Prism

Version:
4.5.1009

MD5:
9cdefeb846748635d9407ecc290a94d9

SHA-1:
3250482ea91659185e93edbdd5396860c6c1b7ae

SHA-256:
a09c77ee7520bd53560d40efd3e00e740d14773953e993addca95f1cfee7ff2e

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/24/2024 10:28:33 PM UTC  (today)

Scan engine
Detection
Engine version

NANO AntiVirus
Trojan.Win32.Win32.dcjepn
0.28.2.61148

File size:
79 KB (80,904 bytes)

Product version:
4.5.1009

Copyright:
Sisense LTD.

Original file name:
Prism.Oxygen.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\sisense\prism\prism.oxygen.exe

Digital Signature
Signed by:
SiSense Ltd.

Authority:
The USERTRUST Network

Valid from:
7/21/2010 8:00:00 PM

Valid to:
7/21/2013 7:59:59 PM

Subject:
CN=SiSense Ltd., O=SiSense Ltd., STREET=Giborey Israel 20, L=Natanya, S=Israel, PostalCode=62481, C=IL

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
0082AA81F3D4AEF5950DE0F470C96A6DC9

File PE Metadata
Compilation timestamp:
5/13/2013 10:02:44 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:jfCn2xb+Pt2fh69dd5HuhKIzNSJcuIQinMiPvj:2n2xb3chHQKIzN/uuMiPvj

Entry address:
0x145BE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 70, A3, A3, 2C, A9, F5, D0, 59, 79, 19, 61, D8, 92, 19, A5, FE, B7, 15, 69, E4, A6, 56, 82, 89, 54, AD, 1F, 7D, 31, FC, 9A, CF, 40, 5C, 0F, 85, 3A, E6, B4, 45, 79, B0, A1, B9, 70, CD, 69, 65, 52, 66, 68, 6E, 20, 4D, 18, 22, 76, B5, 33, 11, 12, 33...
 
[+]

Entropy:
5.7792

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
73.5 KB (75,264 bytes)

Service
Display name:
Prism.Oxygen

Type:
Win32OwnProcess


Scan Prism.Oxygen.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.