home

pandorarecovery.exe

Pandora Recovery

Pandora Corp

This is a setup program which is used to install the application. This is installed with PandoraRecovery (Remove Only). The file has been seen being downloaded from doc-0s-0o-docs.googleusercontent.com.
Publisher:
Pandora Corp.  (signed by Pandora Corp)

Product:
Pandora Recovery

Version:
2, 0, 1, 0

MD5:
70d857ea5aee887effcb122e81b7f0f2

SHA-1:
7069fd2437fd1aa95fec1f107981aedb02e93625

SHA-256:
5d5db2d31290e96ed560663321953cc9f149bcd59c603ec56eba4383f0ec4abc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 6:27:53 PM UTC  (today)

File size:
805.3 KB (824,640 bytes)

Product version:
2, 0, 1, 0

Copyright:
Copyright (c) Pandora Corp. 2004-2007.

Original file name:
Pandora Recovery.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\pandora recovery\pandorarecovery.exe

Digital Signature
Signed by:
Pandora Corp

Authority:
VeriSign, Inc.

Valid from:
11/23/2007 1:00:00 AM

Valid to:
12/8/2008 12:59:59 AM

Subject:
CN=Pandora Corp, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Pandora Corp, S=Nevada, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
662D5A8095842FF11C42E86E2A70ABA5

File PE Metadata
Compilation timestamp:
6/30/2008 2:05:33 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:nJDgxW5ox9xKiLdZYrlfNhizpF8lMAx/62:Rg05ozxnLc/+pF8lMAZ

Entry address:
0x93DAA

Entry point:
E8, A9, 04, 00, 00, E9, DA, FC, FF, FF, FF, 25, 64, F5, 49, 00, FF, 25, 68, F5, 49, 00, FF, 25, 6C, F5, 49, 00, FF, 25, 70, F5, 49, 00, FF, 25, 74, F5, 49, 00, FF, 25, 78, F5, 49, 00, FF, 25, 7C, F5, 49, 00, FF, 25, 80, F5, 49, 00, FF, 25, 84, F5, 49, 00, FF, 25, 88, F5, 49, 00, FF, 25, 8C, F5, 49, 00, FF, 25, 90, F5, 49, 00, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, B8, 25, 4C, 00, 89, 0D, B4, 25, 4C, 00, 89, 15, B0, 25, 4C, 00, 89, 1D, AC, 25, 4C, 00, 89, 35, A8, 25, 4C, 00, 89, 3D, A4, 25, 4C, 00, 66, 8C...
 
[+]

Code size:
632 KB (647,168 bytes)

The file pandorarecovery.exe has been discovered within the following program.

PandoraRecovery (Remove Only)  by Pandora Corp
Publisher's description - “Pandora Mobile Recovery is a portable version of Pandora Recovery that requires no installation and is distributed on a 1 GB USB thumb drive as part of the Pandora PowerPack.”
www.pandorarecovery.com
About 5% of users remove it
 
Powered by Should I Remove It?

The file pandorarecovery.exe has been seen being distributed by the following URL.

https://doc-0s-0o-docs.googleusercontent.com/docs/securesc/d2djf83kitcaadup53211u66chsl4n02/oj5muqke185osvafptgbb3cr7gtom6ah/1451764800000/.../01352385753836245630/0B9URIX3_lGBfYU5mOEhzZE1nbjQ?e=download

Scan pandorarecovery.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.