» SysSafe.exe
Overview
Analysis
File Details

SysSafe.exe

System Safety Monitor Free Edition

System Safety Limited

File name:

SysSafe.exe

Publisher:

System Safety Limited (signed and verified)

Product:

System Safety™ Monitor Free Edition

Description:

System Safety™ Monitor

Version:

2.0.8.585

MD5:

411778517de007816e245df44e02ede2

SHA-1:

b844e2b268c37c4fc608fa453259474e2cb1e47b

SHA-256:

48b5d41a4217f9596b90c900f9c2c2237c898fa24db8b8fa417aac27d54d26a7

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

11/24/2024 9:32:44 AM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

Win.Trojan.PCRat-1

0.98/21511

File size:

2.2 MB (2,289,424 bytes)

Product version:

2.0

Original file name:

SysSafe.exe

File type:

Executable application (Win32 EXE)

Digital Signature

Signed by:

System Safety Limited

Authority:

The USERTRUST Network

Valid from:

7/29/2007 9:00:00 AM

Valid to:

7/29/2008 8:59:59 AM

Subject:

CN=System Safety Limited, O=System Safety Limited, STREET="#24 Tangerine Street", L=Belmopan, S=N.A., PostalCode=N.A., C=BZ

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

0DA49CEFCB053F6D509C21FCEB394B6C

File PE Metadata

Compilation timestamp:

5/1/2008 5:05:11 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:Rijl5W/AWRxAfN9SmbbdDJV6brB38TSH7lTNb6QuDgLQKhpUjVrD5mBpLUDjzeMS:Rik+xdNV6bt3VTNb6QRuVhmBpijbygs

Entry address:

0x18F370

Entry point:

55, 8B, EC, 83, C4, F0, 53, 56, B8, D0, EC, 58, 00, E8, 3E, 86, E7, FF, 8B, 35, 04, 29, 59, 00, 33, C0, 55, 68, 89, F6, 58, 00, 64, FF, 30, 64, 89, 20, A1, 60, 2B, 59, 00, 83, 38, 02, 75, 7D, 68, 98, F6, 58, 00, E8, A6, 8C, E7, FF, 8B, D8, 85, DB, 74, 3C, 6A, 13, 53, E8, B0, 8C, E7, FF, A3, 94, 50, 59, 00, 6A, 03, 53, E8, A3, 8C, E7, FF, 8B, 15, 00, 2B, 59, 00, 89, 02, 6A, 04, 53, E8, 93, 8C, E7, FF, 8B, 15, 14, 29, 59, 00, 89, 02, 83, 3D, 94, 50, 59, 00, 00, 74, 06, FF, 15, 94, 50, 59, 00, 68, FC, 1A, 58... 
[+]

Entropy:

6.6227

Developed / compiled with:

Microsoft Visual C++

Code size:

1.6 MB (1,632,256 bytes)

Scan SysSafe.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.