home

pdanet-win.exe

FoxFi Inc

It runs as a scheduled task under the Windows Task Scheduler.
Publisher:
FoxFi Inc  (signed and verified)

MD5:
b89249c9bb2c215e5f0d5dd404e6c390

SHA-1:
ad4bf31a08bf21c12c4518b35358ee09d15a2572

SHA-256:
7d314c54d24f069c07ff7026611a5b1e2c81e6ea2e53e356d4acae2db8cfd482

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 2:28:15 PM UTC  (today)

File size:
178.9 KB (183,196 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\pdanet-win.exe

Digital Signature
Signed by:
FoxFi Inc

Authority:
FoxFi Inc

Valid from:
4/2/2013 11:21:30 AM

Valid to:
3/31/2023 11:21:30 AM

Subject:
CN=www.foxfi.com, O=FoxFi Inc, S=Some-State, C=US

Issuer:
CN=www.foxfi.com, O=FoxFi Inc, S=Some-State, C=US

Serial number:
00A626411F0EBA8860

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
3072:a335+66EjaXHhgEFSVerCBTKTWLZSrSuS5SK83l3XSwvOG0VEn:a5+1dqE4VCCBWdmLAv3l3CMOlEn

Entry point:
50, 4B, 03, 04, 14, 00, 08, 08, 08, 00, 37, B4, 5C, 38, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 14, 00, 04, 00, 4D, 45, 54, 41, 2D, 49, 4E, 46, 2F, 4D, 41, 4E, 49, 46, 45, 53, 54, 2E, 4D, 46, FE, CA, 00, 00, AD, 96, 4B, 73, B2, 48, 18, 85, F7, A9, CA, 7F, C8, 72, A6, AC, 04, 11, 22, 90, AA, 59, 00, 22, 88, 88, 17, 50, D4, CD, 57, 0D, 34, 17, B9, 34, 74, 83, A8, BF, 7E, 92, 4C, 6A, EA, 1B, 03, 2E, 26, 2E, A1, 8A, A7, CF, 7B, FA, F4, A1, 67, 20, 8F, 03, 48, AA, E7, 0D, C4, 24, 46, F9, DB, 13, FD, D2...
 
[+]

Scheduled Task
Task name:
{39D8576F-A10C-4676-8B32-0727452C7637}

Trigger:
Registration (Runs on registration)


Scan pdanet-win.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.