home

safexec.exe

Sandboxed Runner

Prey SpA

Publisher:
Fork, Ltd.  (signed by Prey SpA)

Product:
Sandboxed Runner

Version:
1.0.0.0

MD5:
5fc9e0662b7f33fa44e32bc1c3e9af57

SHA-1:
d5d3823e8f1f20c443c1028467fff49d4a4c28ce

SHA-256:
62fd1af2304fa82a0c33d83123607d059c2d9c925bc9b46ccaab8df4537b4e34

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/27/2024 3:56:28 AM UTC  (today)

Scan engine
Detection
Engine version

NANO AntiVirus
Trojan.Win32.Senglot.cxsfpb
0.30.0.65070

File size:
569.8 KB (583,464 bytes)

Product version:
1.0.0.0

Copyright:
(c) 2014 Fork, Ltd.

Original file name:
safexec.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\prey\current\lib\system\windows\bin\safexec.exe

Digital Signature
Signed by:
Prey SpA

Authority:
StartCom Ltd.

Valid from:
7/31/2013 7:30:41 AM

Valid to:
7/31/2015 11:54:50 PM

Subject:
E=contact@preyproject.com, CN=Prey SpA, O=Prey SpA, L=Santiago, S=Metropolitana de Santiago, C=CL, Description=QYTZB2062WIJ5NB5

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0A94

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.24

CTPH (ssdeep):
6144:fYB9WEPLcqjChccHZJ15hqM/bE2Yh7YroA3woSNdPP5qTJ/UP1mmfl5qL:fmfPmhccHZJ13N5Yh7YE0z8H5mJmnq

Entry address:
0x1280

Entry point:
83, EC, 1C, C7, 04, 24, 01, 00, 00, 00, FF, 15, 60, E3, 48, 00, E8, 6B, FD, FF, FF, 8D, 74, 26, 00, 8D, BC, 27, 00, 00, 00, 00, 83, EC, 1C, C7, 04, 24, 02, 00, 00, 00, FF, 15, 60, E3, 48, 00, E8, 4B, FD, FF, FF, 8D, 74, 26, 00, 8D, BC, 27, 00, 00, 00, 00, A1, 84, E3, 48, 00, FF, E0, 89, F6, 8D, BC, 27, 00, 00, 00, 00, A1, 78, E3, 48, 00, FF, E0, 90, 90, 90, 90, 90, 90, 90, 90, 90, 55, 89, E5, 83, EC, 18, C7, 04, 24, 00, 40, 46, 00, E8, 5A, 4F, 01, 00, BA, F0, D7, 40, 00, 83, EC, 04, 85, C0, 74, 15, C7, 44...
 
[+]

Entropy:
6.0364

Code size:
369 KB (377,856 bytes)

Scan safexec.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.