» PMB.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

PMB.exe

Pando Media Booster

Pando Networks, Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Pando Media Booster’. This is installed with Pando Media Booster.

File name:

PMB.exe

Publisher:

Pando Networks, Inc. (signed and verified)

Product:

Pando Media Booster

Version:

2,6,0,8

MD5:

cda339eec2427447e6eb1d54c1b916f6

SHA-1:

b3012c0e08f79cdf92d82fa66aa99c7a30f8cc13

SHA-256:

b3781dade5058efcb6b110e18cf0aa94dc51d4acd089ba2597bf0f2428ace74c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 9:36:57 AM UTC (today)

File size:

4.1 MB (4,287,536 bytes)

Product version:

2,6,0,8

Original file name:

PMB.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\pando networks\media booster\pmb.exe

Digital Signature

Signed by:

Pando Networks, Inc.

Authority:

Thawte, Inc.

Valid from:

4/4/2012 8:00:00 PM

Valid to:

6/29/2014 7:59:59 PM

Subject:

CN="Pando Networks, Inc.", O="Pando Networks, Inc.", L=New York, S=New York, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

69FD587152CFDDF516423156E752D014

File PE Metadata

Compilation timestamp:

5/20/2013 5:51:04 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0x18003D

Entry point:

E8, 46, 07, 00, 00, E9, 35, FD, FF, FF, CC, FF, 25, 90, 17, 6C, 00, FF, 25, A0, 17, 6C, 00, FF, 25, A4, 17, 6C, 00, FF, 25, A8, 17, 6C, 00, FF, 25, B4, 17, 6C, 00, FF, 25, BC, 17, 6C, 00, FF, 25, C8, 17, 6C, 00, FF, 25, CC, 17, 6C, 00, 6A, 10, 68, A8, E4, 74, 00, E8, 60, 00, 00, 00, 33, C0, 89, 45, E0, 89, 45, FC, 89, 45, E4, 8B, 45, E4, 3B, 45, 10, 7D, 13, 8B, 75, 08, 8B, CE, FF, 55, 14, 03, 75, 0C, 89, 75, 08, FF, 45, E4, EB, E5, C7, 45, E0, 01, 00, 00, 00, C7, 45, FC, FE, FF, FF, FF, E8, 08, 00, 00, 00... 
[+]

Entropy:

6.5983

Code size:

2.7 MB (2,880,512 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Pando Media Booster

Command:

C:\Program Files\pando networks\media booster\pmb.exe

The file PMB.exe has been discovered within the following programs.

Pando Media Booster by Pando Networks Inc.

Pando Media Booster (PMB) is an application by Pando Networks that is used by game and software publishers to ensure safe, complete and speedy downloads of large files. PMB is primarily used to download MMORPGs.

www.pandonetworks.com/pando-media-booster-support-faq

51% remove it

Scan PMB.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.