Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

2, 0, 0, 2 13.04%
2, 0, 0, 1 4.35%
1, 0, 0, 12 82.61%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegisterServiceCtrlHandlerW, RegDeleteValueW, RegSetValueExW, RegOpenKeyW, RegQueryValueExW, SetServiceStatus, InitializeSecurityDescriptor, AllocateAndInitializeSid, InitializeAcl, AddAccessAllowedAce, SetSecurityDescriptorDacl, IsValidSecurityDescriptor, FreeSid, CreateServiceW, StartServiceW, RegOpenKeyExW, RegCloseKey, OpenSCManagerW, OpenServiceW, CloseServiceHandle, QueryServiceStatus, ControlService, DeleteService, StartServiceCtrlDispatcherW
kernel32.dll
InitializeCriticalSection, GlobalFree, GetCommandLineW, InterlockedIncrement, InterlockedDecrement, CreateFileA, GetVersionExW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, LCMapStringW, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, GetModuleHandleW, GetProcAddress, GetCurrentProcess, OpenEventW, CreateMutexW, CreateNamedPipeW, ConnectNamedPipe, GetLastError, ReadFile, WriteFile, FlushFileBuffers, DisconnectNamedPipe, GetModuleFileNameW, SetCurrentDirectoryW, Sleep, SetEvent, CreateEventW, CreateThread, CloseHandle, CreateFileW, WaitForSingleObject, WriteConsoleW, DeviceIoControl, LCMapStringA, LoadLibraryA, HeapReAlloc, VirtualAlloc, GetConsoleMode, GetConsoleCP, WideCharToMultiByte, SetFilePointer, GetSystemTimeAsFileTime, GetCurrentProcessId, GetFileAttributesW, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, RaiseException, RtlUnwind, HeapFree, GetVersionExA, HeapAlloc, GetProcessHeap, GetStartupInfoW, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, GetCurrentThreadId, HeapSize, ExitProcess, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, GetStdHandle, GetModuleFileNameA, FreeEnvironmentStringsA, MultiByteToWideChar, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineA, SetHandleCount, GetFileType, GetStartupInfoA, HeapDestroy, HeapCreate, VirtualFree, QueryPerformanceCounter, GetTickCount
ole32.dll
CoSetProxyBlanket, CoCreateInstance, CoInitializeSecurity, CoInitializeEx
shell32.dll
CommandLineToArgvW
user32.dll
SetTimer, CreateWindowExW, ShowWindow, UpdateWindow, GetMessageW, TranslateAcceleratorW, TranslateMessage, DispatchMessageW, LoadIconW, LoadCursorW, RegisterClassExW, BeginPaint, EndPaint, PostQuitMessage, DefWindowProcW, DestroyWindow, KillTimer

GFNEXSrv.exe

GFNEXSrv by PEGATRON CORPORATION (Signed)

Remove GFNEXSrv.exe
Version:   2, 0, 0, 2
MD5:   6cf91b90c0f2b750f128bb28ab6b1a01
SHA1:   f9a3da9d0a8181590ff53948003ea51c89b61d61
SHA256:   04ac0998439c0e33ba0000fed331daddc33315364c4a8b9c355cb572be30de92

Overview

gfnexsrv.exe runs as a service under the name GFNEX Service (GFNEXSrv) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including PHotkey published by Pegatron Corporation, PHotkey from Pegatron Corporation and PHotkey by Pegatron Corporation. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by PEGATRON CORPORATION which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:gfnexsrv.exe
Product name: GFNEXSrv
Description:GFNEXSrv
Typical file path:C:\Windows\System32\gfnexsrv.exe
File version:2, 0, 0, 2
Size:130.51 KB (133,640 bytes)
Certificate
Issued to:PEGATRON CORPORATION
Authority (CA):VeriSign
Effective date:Monday, February 16, 2009
Expiration date:Thursday, March 29, 2012
Digital DNA
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

ResourcesPrograms

The following programs will install this file
Pegatron Corporation
5% remove
The Pegatron Hotkey utility for the the wireless network key and GPU switch provides network connectivity and recognition through a hotkey configuration.

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'GFNEXSrv' (GFNEX Service)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00054440%
0.028634%
Kernel CPU:0.00018573%
0.013761%
User CPU:0.00035867%
0.014873%
Kernel CPU time:86 ms/min
100,923,805ms/min
CPU cycles:117,629/sec
17,470,203/sec
Context switches:3/sec
284/sec
Memory
Private memory:1.51 MB
21.59 MB
Private (maximum):4.45 MB
Private (minimum):4 MB
Non-paged memory:1.51 MB
21.59 MB
Virtual memory:44.13 MB
140.96 MB
Virtual memory (peak):50.22 MB
169.69 MB
Working set:4.12 MB
18.61 MB
Working set (peak):4.46 MB
37.95 MB
Page faults:1,484/min
2,039/min
I/O
I/O read transfer:8 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:8 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:0 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:11
12
Handles:113
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:"C:\Program Files\photkey\gfnexsrv.exe"
Owner:SYSTEM
Windows Service
Service name:GFNEXSrv
Display name:GFNEX Service
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
sechost.dll
Total CPU:0.00212740%
0.272967%
Kernel CPU:0.00069461%
0.107585%
User CPU:0.00143279%
0.165382%
CPU cycles:466,904/sec
5,741,424/sec
Context switches:3/sec
79/sec
Memory:100 KB
1.16 MB
GFNEXSrv.exe (main module)
Total CPU:0.00009972%
Kernel CPU:0.00009972%
User CPU:0.00000000%
CPU cycles:1,185/sec
Memory:132 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 73.91%
Windows 7 Ultimate 21.74%
Windows 7 Professional 4.35%

Distribution by countryDistribution by country

United States installs about 30.43% of GFNEXSrv.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Toshiba 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE