» PFConfig.exe
Overview
Analysis
File Details
Programs (1)

PFConfig.exe

PFConfig

Portforward, LLC

This file is installed with the program PFConfig 1.0.296.

File name:

PFConfig.exe

Publisher:

www.portforward.com (signed by Portforward, LLC)

Product:

PFConfig

Description:

PFConfig.exe allows you to easily configure your router's port forwarding section.

Version:

1.00.0296

MD5:

764cfbead0568b05e2b81e859b226172

SHA-1:

a652d9032e6bd0e47b41227cac9bb951bbe2faaf

SHA-256:

2b31247554cceaa64e02dfb8298de83d429dd9262889005d755812b14de0033d

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

11/27/2024 1:34:40 PM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Packed/Execryptor

7.1.1

File size:

580.5 KB (594,448 bytes)

Product version:

1.00.0296

Original file name:

PFConfig.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\pfconfig\pfconfig.exe

Digital Signature

Signed by:

Portforward, LLC

Authority:

GoDaddy.com, Inc.

Valid from:

6/24/2010 9:36:38 PM

Valid to:

6/24/2011 9:36:38 PM

Subject:

CN="Portforward, LLC", O="Portforward, LLC", L=Grants Pass, S=OR, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

76DD827C0528

File PE Metadata

Compilation timestamp:

8/3/2010 9:29:35 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

12288:6fNECS87Nzzc7Pqr5loYuWJcikNxTSxWKJCUDV/6VwV:6VvS8dcT4vo1xuT/6W

Entry address:

0x21A8A9

Entry point:

E8, 3B, FF, FF, FF, 05, B2, 45, 00, 00, FF, E0, E8, 2F, FF, FF, FF, 05, 2B, 00, 00, 00, FF, E0, E8, 04, 00, 00, 00, FF, FF, FF, FF, 5E, C3, 00, 53, 0B, 5F, 70, 3B, 51, 28, 22, F8, 6E, 15, B7, C5, FB, 75, 9A, 9B, FE, 97, 4B, A0, 52, 4B, 66, 21, BB, 59, 0B, 22, 34, 4C, 14, B1, 7D, 9A, 53, 20, D8, 8E, 5D, F3, 4D, 3E, 4C, 1C, A3, 39, 8A, 9B, C7, 19, 86, 7D, 00, D9, E4, BB, 63, 75, 9C, 15, 6F, 7E, 7A, 3A, 26, A0, 66, 74, 2B, 53, 57, 3C, 23, 2B, 3B, 09, 95, 07, 4A, 20, 56, 54, 38, C6, 58, 4D, 42, 59, 57, A2, 0A... 
[+]

Entropy:

7.5536

Code size:

1.3 MB (1,310,720 bytes)

The file PFConfig.exe has been discovered within the following program.

PFConfig 1.0.296 by Portforward.com

www.portforward.com

About 6% of users remove it

Scan PFConfig.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.