home

pangu9_v1.0.1.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dl.pangu.25pp.com.
MD5:
cfb0d89827055ebd689762ffa372316b

SHA-1:
501626437d36dea90b341cfae26100cb18287134

SHA-256:
c0adf0f86266f9134501963e159e642f20ea96d8cc58385dbc6c78ceedade8c9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:22:19 PM UTC  (today)

File size:
14.7 MB (15,457,439 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\pangu9_v1.0.1.exe

File PE Metadata
Compilation timestamp:
10/15/2015 8:04:43 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:IBVVrvIxsL+f3ySeKb1yJYfl0B4rsGABkIQ:IhwQm3AK1EKe3o

Entry address:
0x446F05

Entry point:
60, 60, 54, 9C, C7, 44, 24, 44, 81, A7, 84, 00, 9C, 68, 62, 4B, AC, 5A, C7, 44, 24, 48, 56, E4, 9A, D3, 88, 74, 24, 10, 8D, 64, 24, 48, E9, 55, AB, 01, 00, 7B, 57, 4B, D2, 39, 75, 65, 12, BC, EA, BD, 31, 90, 4E, F5, D1, 44, 5A, 21, 95, 10, AE, 65, 31, CC, BA, 5D, 31, C0, 26, 99, 3D, F8, AE, F4, B1, CA, 2C, CE, E3, F7, 20, 8E, 74, DB, FF, EA, 48, 7E, 97, A8, 99, CF, F9, 5D, 21, AE, C4, 69, 95, 3C, C2, 81, A4, 94, B4, 19, CF, F2, 3C, 4E, 36, 7D, 0E, 9C, 3F, 63, 9D, AE, 38, CC, C2, F5, 71, D8, 96, 95, A1, 1D...
 
[+]

Entropy:
7.8922  (probably packed)

Code size:
2.1 MB (2,215,424 bytes)

The file pangu9_v1.0.1.exe has been seen being distributed by the following URL.

http://dl.pangu.25pp.com/.../Pangu9_v1.0.1.exe

Scan pangu9_v1.0.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.