» _getintopc.com_pangu9_v1.1.0.exe
Overview
Analysis
File Details

_getintopc.com_pangu9_v1.1.0.exe

Lingbao Qinling Electronics Co., Ltd.

File name:

Publisher:

Lingbao Qinling Electronics Co., Ltd. (signed and verified)

Version:

1, 1, 0, 0

MD5:

16fe37a0d471e21d3a7381f832d6a3df

SHA-1:

b501f3442d720ccd0dc7d24e48582eb94e94319b

SHA-256:

d2d1f56da63136c442674159b9198b61999b7090832c92f43e466431f13ee1c4

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 7:56:05 PM UTC (today)

File size:

73.2 MB (76,739,992 bytes)

Product version:

1, 1, 0, 0

Original file name:

Pangu.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\programs\_getintopc.com_pangu9_v1.1.0.exe

Digital Signature

Signed by:

Lingbao Qinling Electronics Co., Ltd.

Authority:

VeriSign, Inc.

Valid from:

10/13/2015 3:00:00 AM

Valid to:

10/13/2016 2:59:59 AM

Subject:

CN="Lingbao Qinling Electronics Co., Ltd.", OU=DEV, O="Lingbao Qinling Electronics Co., Ltd.", L=Lingbao, S=Henan, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

501C911C485179AB73B730D83BBEF929

File PE Metadata

Compilation timestamp:

10/21/2015 12:16:48 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0x3F3B20

Entry point:

60, 9C, E9, 78, 85, FF, FF, C2, E1, A4, 79, 9C, E8, 76, 70, F0, 49, 7F, 72, 63, F8, 99, FC, 97, 94, AB, F7, 9E, DB, D2, DE, A5, BA, BD, 01, 5A, E3, 5C, 4D, 3C, 40, 80, 5B, FA, EF, 5F, 80, 02, 7A, CC, 6E, 38, BE, E5, CD, 4D, 9D, EF, A3, C6, 36, BF, 21, B2, AF, 33, 0D, 0F, 2A, 8E, 54, FC, A6, 16, DC, 4F, 35, A3, 92, FE, E8, 6A, 1B, 76, 0D, 49, 4F, EB, 28, DD, 28, D0, BF, 73, D8, 1D, 91, 24, E4, F8, B2, A5, 69, 84, 97, 02, F1, AC, F0, 81, F6, E4, 27, F9, 3D, 76, 68, EE, 15, 21, 9D, 78, 4B, 86, 07, BF, A2, 59... 
[+]

Entropy:

7.9826 (probably packed)

Code size:

2.1 MB (2,186,240 bytes)

Scan _getintopc.com_pangu9_v1.1.0.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.