home

PanGPS.exe

GlobalProtect

Palo Alto Networks

It runs as a separate (within the context of its own process) windows Service named “PanGPS”.
Publisher:
Palo Alto Networks  (signed and verified)

Product:
GlobalProtect

Description:
GlobalProtect service

Version:
3.1.6-19

MD5:
2c703fc009e94ae9417a2d8b79b0dccd

SHA-1:
f9391590de063c9da789dee2a839726c87246cd5

SHA-256:
2250f2f6dc53b9539ddc46c0c8f5a9b3e60bdf505c91a7447cf28eeeb2e51026

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/3/2024 2:53:33 PM UTC  (today)

File size:
3.2 MB (3,325,768 bytes)

Product version:
3.1.6-19

Copyright:
Palo Alto Networks 2014(C) All rights reserved.

Original file name:
PanGPS.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\palo alto networks\globalprotect\pangps.exe

Digital Signature
Signed by:
Palo Alto Networks

Authority:
Symantec Corporation

Subject:
CN=Palo Alto Networks, O=Palo Alto Networks, L=Santa Clara, S=California, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
3838D5414BA95488F3D1D0AE51E1BE06

File PE Metadata
Compilation timestamp:
2/21/2017 8:05:30 PM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x1C5C94

Entry point:
48, 83, EC, 28, E8, FF, 0D, 00, 00, 48, 83, C4, 28, E9, 32, FE, FF, FF, FF, 25, 74, CE, 01, 00, FF, 25, 66, CE, 01, 00, FF, 25, 58, CE, 01, 00, FF, 25, 4A, CE, 01, 00, FF, 25, 3C, CE, 01, 00, FF, 25, 2E, CE, 01, 00, FF, 25, 20, CE, 01, 00, FF, 25, 12, CE, 01, 00, FF, 25, 04, CE, 01, 00, 48, 83, EC, 28, 4D, 8B, 41, 38, 48, 8B, CA, 49, 8B, D1, E8, 0D, 00, 00, 00, B8, 01, 00, 00, 00, 48, 83, C4, 28, C3, CC, CC, CC, 40, 53, 48, 83, EC, 20, 45, 8B, 18, 48, 8B, DA, 4C, 8B, C9, 41, 83, E3, F8, 41, F6, 00, 04, 4C...
 
[+]

Code size:
1.9 MB (1,966,592 bytes)

Service
Display name:
PanGPS

Description:
Pan GlobalProtect Service

Type:
Win32OwnProcess


Scan PanGPS.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.