Should I block it?
No, this file is 100% safe to run.
Relationships
bash.exe
| MD5: | 2492684ec9531b80c6a135ecb347c6f8 |
| SHA1: | f02ab27d4cda7ec645477bb32631c6d474e94bdf |
| SHA256: | 09e5657cb60e41779f26f166e166b9dd963c3c907f7f4e47b3cbb8544f59a9f3 |
Overview
bash.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent
cronsvc.exe (PreyService by Fork Ltd).
Details
| File name: | bash.exe |
| Typical file path: | C:\prey\platform\windows\bin\bash.exe |
| Size: | 554 KB (567,296 bytes) |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.39661722% | |
| Kernel CPU: | 0.22975967% | |
| User CPU: | 0.16685755% | |
| Kernel CPU time: | 369 ms/min | |
| Context switches: | 91/sec | |
| Memory |
| Private memory: | 2.67 MB | |
| Private (maximum): | 4.14 MB | |
| Private (minimum): | 4.09 MB | |
| Non-paged memory: | 2.67 MB | |
| Virtual memory: | 303.34 MB | |
| Virtual memory (peak): | 308.22 MB | |
| Working set: | 4.45 MB | |
| Working set (peak): | 5.66 MB | |
| Resource allocations |
| Threads: | 6 | |
| Handles: | 116 | |
Process properties
| Platform: | 64-bit |
| Command lines: |
- "C:\prey\platform\windows\bin\bash.exe" "C:\prey\prey.sh" -l
- C:\prey\platform\windows\bin\bash.exe
|
| Owner: | SYSTEM |
| Parent processes: |
|
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
66.67% |
|
| Windows 7 Ultimate |
33.33% |
|
Distribution by country
United States installs about 66.67% of bash.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Toshiba |
100.00% |
|
