Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Child process
Related files
 PE file structure
|
Show functions |
Import table
kernel32.dll
GetEnvironmentVariableW, GetProcessIoCounters, SetDllDirectoryW, GetCurrentProcess, SetEnvironmentVariableW, GetSystemTimeAsFileTime, WideCharToMultiByte, GetModuleFileNameW, MultiByteToWideChar, ExpandEnvironmentStringsW, DecodePointer, IsProcessorFeaturePresent, GetCurrentThreadId, GetCurrentProcessId, QueryPerformanceCounter, EncodePointer, CloseHandle, GetProcAddress, GetLastError, CreateFileW, ReadFile, LoadLibraryExW, FreeLibrary, IsDebuggerPresent
msvcr110.dll
DllMain
user32.dll
MessageBoxW
palemoon.exe
Pale Moon by Markus Straver (Signed)
| Version: | 19.0 |
| MD5: | 7df2546a7574bc19da30847a976ca1b0 |
| SHA1: | 4708670f4e3e0c08361c74ca4f1091285216ea3d |
| SHA256: | 853148a21d59fce3a81ca705010eb9340eced4483874def6792037dc95a1ab29 |
Overview
palemoon.exe executes as a process with the local user's privileges typically within the context of its parent
systemexplorer.exe (System Explorer by Miroslav Topolar). It is installed with a couple of know programs including CCleaner published by Piriform, SeaTools for Windows from Seagate Technology and SeaTools for Windows by Seagate Technology. The file is digitally signed by Markus Straver which was issued by the StartCom Ltd. certificate authority (CA).
Details
| File name: | palemoon.exe |
| Publisher: | Moonchild Productions |
| Product name: | Pale Moon |
| Description: | Pale Moon optimized web browser |
| Typical file path: | C:\Documents and Settings\user\My documents\downloads\palemoon\palemoon.exe |
| File version: | 19.0 |
| Product version: | 19.0.2 |
| Size: | 239.5 KB (245,248 bytes) |
| Certificate |
| Issued to: | Markus Straver |
| Authority (CA): | StartCom Ltd. |
| Expiration date: | Tuesday, January 19, 2016 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
CCleaner developed by Piriform, is a utility program used to clean potentially unwanted files and invalid Windows Registry entries from a computer. CCleaner supports the cleaning of temporary or potentially unwanted files left by certain programs along with browsing history, cookies, recycle bin, memory dumps, file fragments, log files, system caches, application data, autocomplete form history, and various other data. The program also ...
SeaTools is a software to test and analyze hard disks on a hardware level. It can perform short and long drive self-tests and read/write tests, extract SMART and drive information and perform advanced tests. It was created by Seagate in response to the fact that more than one third of all drives sent in for repair were actually not defective at all, thus creating unnecessary costs for retailers and the company by having to ship and anal...
“We know all about viruses and they’re a pain. They can slow down your computer or try to steal your data and you might not even know you’ve got one. What you need is a quick and easy way to find and get rid of them. That’s why we’re giving you a handy little tool that does exactly that. Even if you already have antivirus installed on your computer you can install our tool to identify and clean up infections your antivirus might have mis...”
Behaviors
Shell open command
Network connections
[TCP] 208.43.26.98-static.reverse.softlayer.com (208.43.26.98:9091)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.10110096% | |
| Kernel CPU: | 0.01353168% | |
| User CPU: | 0.08756928% | |
| Kernel CPU time: | 31,219 ms/min | |
| Context switches: | 349/sec | |
| Memory |
| Private memory: | 338.12 MB | |
| Private (maximum): | 237.33 MB | |
| Private (minimum): | 3.77 MB | |
| Non-paged memory: | 338.12 MB | |
| Virtual memory: | 509.57 MB | |
| Virtual memory (peak): | 521.3 MB | |
| Working set: | 24.43 MB | |
| Working set (peak): | 280.08 MB | |
| Resource allocations |
| Threads: | 41 | |
| Handles: | 411 | |
| GUI GDI count: | 689 | |
| GUI USER count: | 74 | |
Process properties
Threads
Averages
| palemoon.exe (main module) |
| Total CPU: | 14.88368029% | |
| Kernel CPU: | 2.69333408% | |
| User CPU: | 12.19034621% | |
| Context switches: | 174/sec | |
| Memory: | 252 KB | |
| MSVCR110.dll |
| Total CPU: | 0.03985201% | |
| Kernel CPU: | 0.00863012% | |
| User CPU: | 0.03122189% | |
| Context switches: | 9/sec | |
| Memory: | 856 KB | |
| xul.dll (Palemoon by Mozilla Foundation) |
| Total CPU: | 0.00871105% | |
| Kernel CPU: | 0.00580737% | |
| User CPU: | 0.00290368% | |
| Context switches: | 3/sec | |
| Memory: | 21.03 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
60.00% |
|
| Microsoft Windows XP |
40.00% |
|
Distribution by country
United States installs about 60.00% of Pale Moon.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
40.00% |
|
| Dell |
40.00% |
|
| Toshiba |
20.00% |
|
