» PFConfig.exe
Overview
Analysis
File Details
Programs (1)

PFConfig.exe

PFConfig

Portforward, LLC

This file is installed with the program PFConfig 1.0.296.

File name:

PFConfig.exe

Publisher:

www.portforward.com (signed by Portforward, LLC)

Product:

PFConfig

Description:

PFConfig.exe allows you to easily configure your router's port forwarding section.

Version:

1.00.0295

MD5:

f8ae0ce47812c03a5b9e3005883e3f56

SHA-1:

e6ca93f9dafef41976107ef4f3fbb482f0f8f74d

SHA-256:

061ac365a2466f950da3c91c454196e0b859010321fc38ded6843e08ebb08d20

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/24/2024 12:19:51 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Packed/Execryptor

7.1.1

File size:

571 KB (584,720 bytes)

Product version:

1.00.0295

Original file name:

PFConfig.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\pfconfig\pfconfig.exe

Digital Signature

Signed by:

Portforward, LLC

Authority:

GoDaddy.com, Inc.

Valid from:

6/24/2010 10:36:38 PM

Valid to:

6/24/2011 10:36:38 PM

Subject:

CN="Portforward, LLC", O="Portforward, LLC", L=Grants Pass, S=OR, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

76DD827C0528

File PE Metadata

Compilation timestamp:

6/29/2010 10:02:18 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

12288:wR9EyHgvjU4c/JvBLO0nuI0ytHihye7ninV8DkJhtuym5b2:wzvH77J80nuCnVfJhQymN2

Entry address:

0x2172AE

Entry point:

E8, 3B, FF, FF, FF, 05, C7, 35, 00, 00, FF, E0, E8, 2F, FF, FF, FF, 05, 61, 26, 00, 00, FF, E0, E8, 04, 00, 00, 00, FF, FF, FF, FF, 5E, C3, 00, DF, C7, 33, F4, 1F, 1D, 8B, C5, 2B, 8A, 3D, 08, E7, 60, 49, 1C, 2E, 0E, 59, E6, 02, 7B, 0F, 08, 1C, 0A, 9B, 41, 1F, F9, BC, E7, 94, 4E, B4, 24, BC, 74, 92, 93, 86, 71, 61, 7A, 05, D0, A3, 4F, D7, 32, 1D, F8, F0, FB, AA, 0E, 5E, DD, 28, B5, AF, FF, 13, 14, B2, F7, 1E, 71, 4E, 44, DE, 20, 5E, 1E, 1E, 94, 63, 22, 91, C5, F5, B8, 53, AA, A9, 5F, 9F, 3F, CC, BD, C5, E2... 
[+]

Code size:

1.2 MB (1,306,624 bytes)

The file PFConfig.exe has been discovered within the following program.

PFConfig 1.0.296 by Portforward.com

www.portforward.com

About 6% of users remove it

Scan PFConfig.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.