home

Pangu8_v1.2.1.exe

Lingbao Qinling Electronics Co., Ltd.

This is a setup program which is used to install the application. The file has been seen being downloaded from www.appleunlocker.com and multiple other hosts.
Publisher:
Lingbao Qinling Electronics Co., Ltd.  (signed and verified)

Version:
1, 2, 1, 1

MD5:
858992b285128aab007ba9dbf2185f39

SHA-1:
f3c1ca4ddca197eae8d2105650eca16fabf8362f

SHA-256:
5a6a2cfbb5ca1822f66f61c8f49ae20082c37964647212c822dfd4b097b6b9fe

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 5:41:31 PM UTC  (today)

File size:
42.4 MB (44,435,904 bytes)

Product version:
1, 2, 1, 1

Copyright:
Copyright (C) Pangu Team

Original file name:
Pangu.exe

File type:
Executable application (Win32 EXE)

Language:
Çince (Basitlestirilmis, Çin)

Common path:
C:\users\{user}\downloads\pangu8_v1.2.1.exe

Digital Signature
Signed by:
Lingbao Qinling Electronics Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
6/23/2014 3:00:00 AM

Valid to:
6/24/2015 2:59:59 AM

Subject:
CN="Lingbao Qinling Electronics Co., Ltd.", OU=IS, O="Lingbao Qinling Electronics Co., Ltd.", L=Lingbao, S=Henan, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
37EDA0F1C795F86E6AB6E496B415F64B

File PE Metadata
Compilation timestamp:
11/6/2014 6:40:06 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
786432:NNeHPEV2pPTN7baHiOJn5YzS5n099qQjrRCQbBMC4K3wtr+o6EXkL4Yz3se:NNecWmHhh5YW5nmjrRCeBb4pio6OW4Yv

Entry address:
0x612B3F

Entry point:
E8, 6D, D9, 00, 00, 9C, 60, 50, E9, 51, 75, FF, FF, C3, 51, 07, 77, 29, B1, 69, D0, 80, EE, 11, AE, 35, BC, 0E, 54, 56, 21, 10, 3D, C7, 2F, 2D, 0F, 89, 51, BB, 4B, BD, C5, 9F, 0F, F2, DF, 25, 5D, E7, 25, 75, EE, 42, 9B, 37, BB, 79, 96, E2, 65, D9, 90, 28, 7E, 7A, 3D, A4, 59, 79, 51, F7, A1, E1, 8F, C9, 3F, D7, 7C, 59, 31, BF, 27, F0, 11, DC, AF, DE, 50, 41, C5, 7C, 35, B4, FF, F4, A9, 21, 33, BD, 54, C2, B7, EA, 66, 27, 87, 94, AC, 36, 02, 58, 88, 6C, 88, 27, 52, 7D, 36, 66, 1F, DD, 3B, 61, 3B, 43, 1F, 9B...
 
[+]

Entropy:
7.9576  (probably packed)

Code size:
3.4 MB (3,559,424 bytes)

The file Pangu8_v1.2.1.exe has been seen being distributed by the following 32 URLs.

http://www.appleunlocker.com/ver8-1/.../Pangu8_v1.2.1.exe

http://113.171.224.214/.../Pangu8_v1.2.1.exe

http://www.ispazio.net/?dl_name=http://dl.pangu.25pp.com/.../Pangu8_v1.2.1.exe

https://www.dropbox.com/pri/.../Pangu8_v1.2.1.exe

https://mega.nz/temporary/.../2VRiQAwD

http://files.downloadpangu.org/Pangu8_v1.2.1.exe

http://am4-r1f5-stor03.uploaded.net/.../c7cafdd0-93a1-4d6c-b637-ca94c5c26d7d

http://gsf-cf.softonic.com/7ad/8fb/.../SteamSetup.exe

http://am4-r1f5-stor03.uploaded.net/.../b58aa5bd-5683-42fb-a82e-3a2bf3697875

chrome-extension://bigefpfhnfcobdlfbedofhhaibnlghod/persistent/.../XF0BnKwK

http://pangu8.com/.../pangu8.exe

http://redirect.viglink.com/?key=6dbc751ab738fb269eb1590841d5b351&u=http://dl.pangu.25pp.com/.../Pangu8_v1.2.1.exe

http://evasion8.net/Pangu8

http://en-pangu8.com/.../Pangu8_v1.2.1.exe

http://am4-r1f5-stor03.uploaded.net/.../a329f0c9-b199-4fd0-9a6c-80f86cb8c1fa

https://mega.nz/temporary/.../CA9Cma7Z

http://120.52.73.12/dl.pangu.25pp.com/.../Pangu8_v1.2.1.exe

http://www.iphonefirmware.com/.../Pangu8_v1.2.1_(www.iphonefirmware.com).exe

https://mega.nz/temporary/.../kE4RDJrJ

https://mega.nz/temporary/.../XF0BnKwK

https://mega.nz/persistent/.../XF0BnKwK

http://www.guidemyjailbreak.com/.../

http://lnkr.us/get?sourceId=5&uid=49434x152xVIG-S&format=go&host=trendtext.eu&out=http://dl.pangu.25pp.com/jb/Pangu8_v1.2.1.exe&ref=http://.../

https://mega.nz/temporary/.../XRNRDD6Y

http://pangu8.com/.../pangu-win.exe

http://ushari.builtapps.com/pangu

http://pangu8.com/Pangu8.exe

http://www.guidemyjailbreak.com/.../

https://mega.co.nz/temporary/.../XF0BnKwK

http://pangu8.com//.../pangu-win.exe

Latest 30 of 32 download URLs

Scan Pangu8_v1.2.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.