Versions

1.0.0.0	75.00%
1.0.0.0	25.00%

There are 2 versions of cronsvc.exe in the wild, the latest version being 1.0.0.0. It is started as a Windows Service called 'Cron Service for Prey' with the name 'CronService' and described as “Executes the anti-theft software Prey as the system or current logged in user.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 21.25 KB. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is about 0.0008% including both foreground and background operations, the average private memory consumption is about 10.92 MB. Addionally, typically read and write I/O disk operations is about 108 Bytes per minute for reads and 0 Bytes per minute for writes.