home

pandagp12.exe

Panda Security S.L

This is a setup program which is used to install the application. The file has been seen being downloaded from ftf-804.yousendit.com and multiple other hosts.
Publisher:
Panda Security S.L  (signed and verified)

MD5:
b608fcee23573a1b97b2a8df95b3ad42

SHA-1:
42f6995b90251f9b3795ed8201096fc911378934

SHA-256:
f052407f9b8de3212cdf9ce37b446ba664cb073b3cc5d31eba3aa2a4a1df7ace

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 11:13:54 AM UTC  (today)

File size:
74.3 MB (77,957,744 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\pandagp12.exe

Digital Signature
Signed by:
Panda Security S.L

Authority:
VeriSign, Inc.

Valid from:
4/30/2010 2:00:00 AM

Valid to:
5/8/2011 1:59:59 AM

Subject:
CN=Panda Security S.L, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Panda Security S.L, L=Bilbao, S=Bizkaia, C=ES

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0089418AC38C1BEBE7E374571BDB86C4

File PE Metadata
Compilation timestamp:
8/16/2009 1:05:35 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1572864:vBaZHaXlSoFaK0AXHxcG2h5BapveHhzl5qx3Tz7cgyNZC4mo:vFVJaK3SGaBaC55uDs5NsW

Entry address:
0xA7D8

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, 54, 2B, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, E2, A7, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 1C, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 1C, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, C1, AC, FF, FF, C3, 55, 8B, EC, 83, EC, 1C, 56, 33, F6, 56, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 30, 22, 41, 00, 85, C0, 74, 21, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 34, 22, 41, 00, 8D, 45, E4...
 
[+]

Code size:
66 KB (67,584 bytes)

The file pandagp12.exe has been discovered within the following program.

Java 7 Update 15  by Oracle Corporation
Publisher's description - “The full version string for this update release is 1.7.0_15-b03 (where "b" means "build") and the version number is 7u15. JDK 7u15 contains Olson time zone data version 2012i. For more information, refer to Timezone Data Versions in the JRE Software.”
www.oracle.com/technetwork/java/javase/7u15-relnotes-1907738.html
6% remove it
 
Powered by Should I Remove It?

The file pandagp12.exe has been seen being distributed by the following 3 URLs.

https://ftf-804.yousendit.com/download/1/183CFC514BECFC4D/.../PANDAGP12.exe

https://www.hightail.com/.../directDownload&fl=SWhZekZuQVNUME5vSVIwWVUyaHhkak9yTGJqUmJROWhRb2RPcTNPVjQ1WVZPb3RMVXJDeHYyNlM5M0ZwVlFUSi9LRmlZekdNQndJaks1UmFVai8xcVFqQmc1ZG9DRllaMFlDWmNBPT0

https://dl-de07.asknet.com/.../PANDAGP12.exe

Scan pandagp12.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.