Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Child process
 PE file structure
|
Show functions |
Import table
advapi32.dll
ReportEventA, DeregisterEventSource, RegisterEventSourceA, RegOpenKeyExA, RegQueryValueExA, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, RegEnumKeyExA
iphlpapi.dll
GetAdaptersAddresses
kernel32.dll
DllMain
psapi.dll
GetProcessMemoryInfo
user32.dll
GetProcessWindowStation, MessageBoxA, GetUserObjectInformationW, GetDesktopWindow
winmm.dll
timeGetTime
ws2_32.dll
WSAIoctl, WSASocketW, WSASend, WSADuplicateSocketW, FreeAddrInfoW, WSARecv, WSARecvFrom, WSASendTo, GetAddrInfoW
Export table
ares_destroy
ares_destroy_options
ares_dup
ares_expand_name
ares_free_data
ares_free_hostent
ares_free_string
ares_get_servers
ares_gethostbyaddr
ares_gethostbyname
ares_gethostbyname_file
ares_init
ares_init_options
ares_library_cleanup
ares_library_init
ares_mkquery
ares_parse_a_reply
ares_parse_aaaa_reply
ares_parse_mx_reply
ares_parse_ns_reply
ares_parse_ptr_reply
ares_parse_srv_reply
ares_parse_txt_reply
ares_process
ares_process_fd
ares_query
ares_save_options
ares_search
ares_send
ares_set_local_dev
ares_set_local_ip4
ares_set_local_ip6
ares_set_servers
ares_set_servers_csv
ares_set_socket_callback
node_buffer_module
node_cares_wrap_module
node_crypto_module
node_evals_module
node_fs_event_wrap_module
node_fs_module
node_http_parser_module
node_os_module
node_pipe_wrap_module
node_process_wrap_module
node_tcp_wrap_module
node_timer_wrap_module
node_tty_wrap_module
node_typed_array_module
node_udp_wrap_module
node_zlib_module
uv_accept
uv_ares_destroy
uv_ares_init_options
uv_async_init
uv_async_send
uv_buf_init
uv_chdir
uv_check_init
uv_check_start
uv_check_stop
uv_close
uv_cpu_info
uv_cwd
uv_default_loop
uv_disable_stdio_inheritance
uv_dlclose
uv_dlerror
uv_dlopen
uv_dlsym
uv_err_name
uv_exepath
uv_free_cpu_info
uv_free_interface_addresses
uv_freeaddrinfo
uv_fs_chmod
uv_fs_chown
uv_fs_close
uv_fs_event_init
uv_fs_fchmod
uv_fs_fchown
uv_fs_fdatasync
uv_fs_fstat
uv_fs_fsync
uv_fs_ftruncate
uv_fs_futime
uv_fs_link
uv_fs_lstat
uv_fs_mkdir
uv_fs_open
uv_fs_poll_init
uv_fs_poll_start
uv_fs_poll_stop
uv_fs_read
uv_fs_readdir
uv_fs_readlink
uv_fs_rename
uv_fs_req_cleanup
uv_fs_rmdir
uv_fs_sendfile
uv_fs_stat
uv_fs_symlink
uv_fs_unlink
uv_fs_utime
uv_fs_write
uv_get_free_memory
uv_get_process_title
uv_get_total_memory
uv_getaddrinfo
uv_guess_handle
uv_handle_size
uv_hrtime
uv_idle_init
uv_idle_start
uv_idle_stop
uv_interface_addresses
uv_ip4_addr
uv_ip4_name
uv_ip6_addr
uv_ip6_name
uv_is_active
uv_is_closing
uv_is_readable
uv_is_writable
uv_kill
uv_last_error
uv_listen
uv_loadavg
uv_loop_delete
uv_loop_new
uv_mutex_destroy
uv_mutex_init
uv_mutex_lock
uv_mutex_trylock
uv_mutex_unlock
uv_now
uv_once
uv_pipe_bind
uv_pipe_connect
uv_pipe_init
uv_pipe_open
uv_pipe_pending_instances
uv_poll_init
uv_poll_init_socket
uv_poll_start
uv_poll_stop
uv_prepare_init
uv_prepare_start
uv_prepare_stop
uv_process_kill
uv_queue_work
uv_read_start
uv_read_stop
uv_read2_start
uv_ref
uv_req_size
uv_resident_set_memory
uv_run
uv_run_once
uv_rwlock_destroy
uv_rwlock_init
uv_rwlock_rdlock
uv_rwlock_rdunlock
uv_rwlock_tryrdlock
uv_rwlock_trywrlock
uv_rwlock_wrlock
uv_rwlock_wrunlock
uv_sem_destroy
uv_sem_init
uv_sem_post
uv_sem_trywait
uv_sem_wait
uv_set_process_title
uv_setup_args
uv_shutdown
uv_spawn
uv_strerror
uv_strlcat
uv_strlcpy
uv_tcp_bind
uv_tcp_bind6
uv_tcp_connect
uv_tcp_connect6
uv_tcp_getpeername
uv_tcp_getsockname
uv_tcp_init
uv_tcp_keepalive
uv_tcp_nodelay
uv_tcp_simultaneous_accepts
uv_thread_create
uv_thread_join
uv_timer_again
uv_timer_get_repeat
uv_timer_init
uv_timer_set_repeat
uv_timer_start
uv_timer_stop
uv_tty_get_winsize
uv_tty_init
uv_tty_reset_mode
uv_tty_set_mode
uv_udp_bind
uv_udp_bind6
uv_udp_getsockname
uv_udp_init
uv_udp_recv_start
uv_udp_recv_stop
uv_udp_send
uv_udp_send6
uv_udp_set_broadcast
uv_udp_set_membership
uv_udp_set_multicast_loop
uv_udp_set_multicast_ttl
uv_udp_set_ttl
uv_unref
uv_update_time
uv_uptime
uv_walk
uv_write
uv_write2
node.exe
Node.js by Joyent Inc (Signed)
| Version: | 0.10.28 |
| MD5: | 4d6af0613b6b1622913265d5bf82afad |
| SHA1: | 57e565d7a2c10dd9299c15b98ab752e01ab3b4e0 |
Overview
node.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent
cronsvc.exe (Cron Service by Fork Ltd). This is typically installed with the program Node.js published by Joyent, Inc. The file is digitally signed by Joyent Inc which was issued by the GlobalSign nv-sa certificate authority (CA).
Details
| File name: | node.exe |
| Publisher: | Joyent, Inc |
| Product name: | Node.js |
| Description: | Evented I/O for V8 JavaScript |
| Typical file path: | C:\Program Files\att\8.2.1.6\ma\bin\node.exe |
| File version: | 0.10.28 |
| Size: | 5.52 MB (5,786,848 bytes) |
| Build date: | 5/2/2014 1:56 AM |
| Certificate |
| Issued to: | Joyent Inc |
| Authority (CA): | GlobalSign nv-sa |
| Digital DNA |
| PE subsystem: | Windows Console |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
Node.js is a server side software system designed for writing scalable Internet applications, notably web servers. Programs are written on the server side in JavaScript, using event-driven, asynchronous I/O to minimize overhead and maximize scalability. Node.js is a packaged compilation of Google's V8 JavaScript engine, the libUV platform abstraction layer, and a core library, which is itself primarily written in JavaScript.
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00099522% | |
| Kernel CPU: | 0.00018653% | |
| User CPU: | 0.00080870% | |
| Kernel CPU time: | 2,153 ms/min | |
| Memory |
| Private memory: | 97.25 MB | |
| Private (maximum): | 54.13 MB | |
| Private (minimum): | 37.91 MB | |
| Non-paged memory: | 97.25 MB | |
| Virtual memory: | 150.42 MB | |
| Virtual memory (peak): | 152.92 MB | |
| Working set: | 54.2 MB | |
| Working set (peak): | 54.23 MB | |
| Resource allocations |
| Threads: | 7 | |
| Handles: | 129 | |
Process properties
| Integrety level: | Undefined |
| Platform: | 64-bit |
| Command line: | "C:\windows\prey\\current\bin\node.exe" "C:\windows\prey\\current\lib\agent\cli.js" |
| Owner: | SYSTEM |
| Parent process: | cronsvc.exe (Cron Service by Fork Ltd) |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
40.00% |
|
| Windows 8 Pro |
20.00% |
|
| Microsoft Windows XP |
20.00% |
|
| Windows 7 Ultimate |
20.00% |
|
Distribution by country
United States installs about 80.00% of Node.js.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Hewlett-Packard |
100.00% |
|
