home

PNXAssistantLoader.exe

身份认证网关

JILIN UNIVERSITY INFORMATION TECHNOLOGIES CO.,LTD

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PNXAssistant’.
Publisher:
Jilin University Information Technologies Co., Ltd.  (signed by JILIN UNIVERSITY INFORMATION TECHNOLOGIES CO.,LTD)

Product:
身份认证网关

Description:
身份认证网关打开应用组件

Version:
3.0.0.12

MD5:
d8135185b31ab6b635c6c65a7835a58e

SHA-1:
10d3e27e4f46dbdb49645aeffa4e20ebc29af383

SHA-256:
6cdbd7c315fd95c711c3ec708c62737287f8c257697793e813c01cbcb4a32a03

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/12/2025 11:13:37 AM UTC  (today)

File size:
123.7 KB (126,672 bytes)

Product version:
3.0.0.12

Copyright:
Copyright Jilin University Information Technologies Co., Ltd.

Original file name:
PNXAssistantLoader.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\jit\pnxgw\pnxassistantloader.exe

Digital Signature
Signed by:
JILIN UNIVERSITY INFORMATION TECHNOLOGIES CO.,LTD

Authority:
VeriSign, Inc.

Valid from:
4/20/2012 8:00:00 AM

Valid to:
6/20/2013 7:59:59 AM

Subject:
CN="JILIN UNIVERSITY INFORMATION TECHNOLOGIES CO.,LTD", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="JILIN UNIVERSITY INFORMATION TECHNOLOGIES CO.,LTD", L=Changchun, S=Jilin, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
085B855212D1C9023718EE824CAAA676

File PE Metadata
Compilation timestamp:
12/28/2012 4:28:57 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x1ABA

Entry point:
E8, 1D, 38, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 53, 56, 57, FF, 35, C8, 2C, 41, 00, E8, C3, 30, 00, 00, FF, 35, C4, 2C, 41, 00, 8B, F8, 89, 7D, FC, E8, B3, 30, 00, 00, 8B, F0, 59, 59, 3B, F7, 0F, 82, 83, 00, 00, 00, 8B, DE, 2B, DF, 8D, 43, 04, 83, F8, 04, 72, 77, 57, E8, 4B, 39, 00, 00, 8B, F8, 8D, 43, 04, 59, 3B, F8, 73, 48, B8, 00, 08, 00, 00, 3B, F8, 73, 02, 8B, C7, 03, C7, 3B, C7, 72, 0F, 50, FF, 75, FC, E8, D9, 38, 00, 00, 59, 59, 85, C0, 75, 16, 8D, 47, 10, 3B, C7, 72, 40, 50, FF, 75...
 
[+]

Entropy:
5.8653

Code size:
44.5 KB (45,568 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PNXAssistant

Command:
"C:\Program Files\jit\pnxgw\pnxassistantloader.exe"


Scan PNXAssistantLoader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.