Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Child process
Related files
 PE file structure
|
Show functions |
Import table
kernel32.dll
GetEnvironmentVariableW, GetProcessIoCounters, SetDllDirectoryW, GetCurrentProcess, SetEnvironmentVariableW, GetSystemTimeAsFileTime, WideCharToMultiByte, GetModuleFileNameW, MultiByteToWideChar, ExpandEnvironmentStringsW, DecodePointer, IsProcessorFeaturePresent, GetCurrentThreadId, GetCurrentProcessId, QueryPerformanceCounter, EncodePointer, CloseHandle, GetProcAddress, GetLastError, CreateFileW, ReadFile, LoadLibraryExW, FreeLibrary, IsDebuggerPresent
msvcr110.dll
DllMain
user32.dll
MessageBoxW
palemoon.exe
Pale Moon by Markus Straver (Signed)
| Version: | 24.6.0 |
| MD5: | e8311226a15a8d97cdac9d896a58f2d8 |
| SHA1: | a9f34871bb0727579875740a3ac203ccfdeec9e6 |
Overview
palemoon.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. The file is digitally signed by Markus Straver which was issued by the StartCom Ltd. certificate authority (CA).
Details
| File name: | palemoon.exe |
| Publisher: | Moonchild Productions |
| Product name: | Pale Moon |
| Description: | Pale Moon optimized web browser |
| Typical file path: | C:\Documents and Settings\user\My documents\downloads\palemoon\palemoon.exe |
| File version: | 24.6.0 |
| Product version: | 24.6.2 |
| Size: | 259.62 KB (265,848 bytes) |
| Build date: | 6/10/2014 6:22 AM |
| Certificate |
| Issued to: | Markus Straver |
| Authority (CA): | StartCom Ltd. |
| Expiration date: | Tuesday, January 19, 2016 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Shell open command
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00138043% | |
| Kernel CPU: | 0.00077308% | |
| User CPU: | 0.00060735% | |
| Kernel CPU time: | 952,870 ms/min | |
| CPU cycles: | 21,097,921/sec | |
| Memory |
| Private memory: | 311.53 MB | |
| Private (maximum): | 370.76 MB | |
| Private (minimum): | 193.22 MB | |
| Non-paged memory: | 311.53 MB | |
| Virtual memory: | 562.45 MB | |
| Virtual memory (peak): | 637.39 MB | |
| Working set: | 319.32 MB | |
| Working set (peak): | 406.11 MB | |
| Page faults: | 37,049,092/min | |
| I/O |
| I/O read transfer: | 468.04 KB/sec | |
| I/O read operations: | 541/sec | |
| I/O write transfer: | 2.76 MB/sec | |
| I/O write operations: | 1,240/sec | |
| I/O other transfer: | 29.43 KB/sec | |
| I/O other operations: | 1,242/sec | |
| Resource allocations |
| Threads: | 37 | |
| Handles: | 580 | |
| GUI GDI count: | 486 | |
| GUI GDI peak: | 983 | |
| GUI USER count: | 57 | |
| GUI USER peak: | 80 | |
Process properties
Threads
Averages
| palemoon.exe (main module) |
| Total CPU: | 2.65068006% | |
| Kernel CPU: | 0.54820544% | |
| User CPU: | 2.10247462% | |
| CPU cycles: | 52,228,898/sec | |
| Memory: | 268 KB | |
| wow64.dll |
| Total CPU: | 0.03073180% | |
| Kernel CPU: | 0.00855376% | |
| User CPU: | 0.02217804% | |
| CPU cycles: | 1,011,236/sec | |
| Memory: | 252 KB | |
| ntdll.dll |
| Total CPU: | 0.00282568% | |
| Kernel CPU: | 0.00150951% | |
| User CPU: | 0.00131618% | |
| CPU cycles: | 420,201/sec | |
| Memory: | 1.66 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
60.00% |
|
| Microsoft Windows XP |
40.00% |
|
Distribution by country
United States installs about 60.00% of Pale Moon.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
40.00% |
|
| Dell |
40.00% |
|
| Toshiba |
20.00% |
|
