» safeshield.exe
Overview
Analysis
File Details

safeshield.exe

FileStream SafeShield

FileStream, Inc.

File name:

safeshield.exe

Publisher:

FileStream, Inc. (signed and verified)

Product:

FileStream SafeShield

Version:

2.1.5.5115

MD5:

f1f8f1ad2e4a8b86bc52f7c12b697755

SHA-1:

00050fc72f9d2592e0f0b6107beb1de6337cb405

SHA-256:

a242141fe505b1ad096c937205d7c4258d94ad680df3bd1fec570870a9a2e475

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

1/6/2025 10:06:01 AM UTC (today)

File size:

1.3 MB (1,341,928 bytes)

Product version:

2.1.5.5115

Trademarks:

SafeShield

Original file name:

Setup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United Kingdom)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\~ic30\safeshield.exe

Digital Signature

Signed by:

FileStream, Inc.

Authority:

GlobalSign nv-sa

Valid from:

12/5/2009 1:26:00 PM

Valid to:

12/6/2010 1:25:58 PM

Subject:

CN="FileStream, Inc.", O="FileStream, Inc.", L=Glen Head, S=NY, C=US

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

010000000001255EEE3F00

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:NmiRyIGO311LtTfZJqnRUO1OwEcjTL/qWgyqF4gcENuAARnG6qOTLw5VYmor:oU1N1fZJqd1OwpTTqWxM4cNuPlGPVE

Entry address:

0x335001

Entry point:

60, E9, 3D, 04, 00, 00, E9, 70, 1D, ED, 01, 37, 1A, A8, 31, 85, 5D, ED, 04, 29, 45, 8A, D1, 8B, 5D, ED, 84, 09, 16, 37, 45, 4C, 19, 76, 9E, 48, 63, 31, 01, 5B, 9E, 53, 04, 4C, 19, B4, 86, 7F, 52, 31, 01, 4C, 19, ED, 01, D9, 9E, F1, 4B, 90, 19, 3D, 00, E2, 19, 38, 45, 4C, A2, 72, 01, 96, 5D, ED, 8C, 44, A7, 8A, 12, 96, 5D, ED, 54, 9C, 18, 83, FD, 96, 5D, ED, 8A, D1, 15, 2D, 45, 4C, A6, 8A, 1F, 96, 5D, ED, 54, A3, 18, 83, FD, 96, 5D, ED, 8A, D1, 19, 2D, 45, 4C, A6, 72, B6, 85, 5D, ED, 00, 2D, C6, 8D, 0D, 4C... 
[+]

Entropy:

7.9864

Packer / compiler:

ASProtect v1.1

Code size:

805 KB (824,320 bytes)

Scan safeshield.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.