» PMB.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

PMB.exe

Pando Media Booster

Pando Networks, Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Pando Media Booster’. This is installed with Pando Media Booster.

File name:

PMB.exe

Publisher:

Pando Networks, Inc. (signed and verified)

Product:

Pando Media Booster

Version:

2,6,0,8

MD5:

78a37bcb40d6751826ce6026e9478c54

SHA-1:

c74770b54e017b2c7908bf61d0f4d681f4a3045b

SHA-256:

a544f354cfd00451bc41be153e6739110ac3d5f5c955c3bf87cbbcf1c6f78a04

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 9:35:29 AM UTC (today)

File size:

4.1 MB (4,284,976 bytes)

Product version:

2,6,0,8

Original file name:

PMB.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\pando networks\media booster\pmb.exe

Digital Signature

Signed by:

Pando Networks, Inc.

Authority:

Thawte, Inc.

Valid from:

4/4/2012 7:00:00 PM

Valid to:

6/29/2014 6:59:59 PM

Subject:

CN="Pando Networks, Inc.", O="Pando Networks, Inc.", L=New York, S=New York, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

69FD587152CFDDF516423156E752D014

File PE Metadata

Compilation timestamp:

4/24/2013 3:10:16 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0x17F5EB

Entry point:

E8, 48, 07, 00, 00, E9, 37, FD, FF, FF, CC, FF, 25, 90, 07, 6C, 00, FF, 25, A0, 07, 6C, 00, FF, 25, A4, 07, 6C, 00, FF, 25, A8, 07, 6C, 00, FF, 25, B4, 07, 6C, 00, FF, 25, BC, 07, 6C, 00, FF, 25, C8, 07, 6C, 00, FF, 25, CC, 07, 6C, 00, 6A, 10, 68, 00, D4, 74, 00, E8, 62, 00, 00, 00, 33, C0, 89, 45, E0, 89, 45, FC, 89, 45, E4, 8B, 45, E4, 3B, 45, 10, 7D, 13, 8B, 75, 08, 8B, CE, FF, 55, 14, 03, 75, 0C, 89, 75, 08, FF, 45, E4, EB, E5, C7, 45, E0, 01, 00, 00, 00, C7, 45, FC, FE, FF, FF, FF, E8, 08, 00, 00, 00... 
[+]

Entropy:

6.5873

Code size:

2.7 MB (2,877,952 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Pando Media Booster

Command:

C:\Program Files\pando networks\media booster\pmb.exe

The file PMB.exe has been discovered within the following programs.

Pando Media Booster by Pando Networks Inc.

Pando Media Booster (PMB) is an application by Pando Networks that is used by game and software publishers to ensure safe, complete and speedy downloads of large files. PMB is primarily used to download MMORPGs.

www.pandonetworks.com/pando-media-booster-support-faq

51% remove it

Scan PMB.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.