the_kmplayer_1432.exe

PandoraTV

The program is a setup application that uses the Nullsoft Scriptable Install System installer.
Publisher:
PandoraTV  (signed and verified)

MD5:
0444d0559d53d5d2505c7a12440cf8c5

SHA-1:
7d1e623113fa7476d5ad7a36d254b92e9a8cbf14

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/3/2024 4:54:18 PM UTC  (today)

File size:
16.2 MB (16,962,131 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Scriptable Install System

Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\the_kmplayer_1432.exe

Digital Signature
Signed by:

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
5/20/2008 1:28:36 PM

Valid to:
5/20/2010 1:28:36 PM

Subject:
CN=PandoraTV, OU=Software Development Department, O=PandoraTV, L=Gangnam-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
04348BA1EAAB14378526C405C5B680E7

File PE Metadata
Compilation timestamp:
3/30/2008 5:14:03 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x30B4

Entry point:
60, E8, 00, 00, 00, 00, 5B, 81, EB, D0, 48, 16, 03, 83, EC, 74, 8B, EC, 8B, 83, AB, 4B, 16, 03, 89, 45, 00, 8B, 83, B3, 4B, 16, 03, 03, 45, 00, 89, 45, 2C, 8B, 83, B7, 4B, 16, 03, 03, 45, 00, 89, 45, 30, C7, 45, 14, 00, 00, 00, 00, C7, 45, 18, 00, 00, 00, 00, C7, 45, 1C, 00, 00, 00, 00, 8B, 45, 14, FF, 45, 14, 66, 33, C9, 8A, 8C, 03, FF, 4B, 16, 03, 84, C9, 74, 7A, 8B, 45, 1C, 66, 01, 4D, 1C, 03, C3, 05, 13, 4C, 16, 03, 50, 8B, 45, 2C, FF, 10, 85, C0, 0F, 84, 5E, 02, 00, 00, 89, 45, 10, 8B, 45, 1C, 03, C3...
 
[+]

Entropy:
7.9994

Packer / compiler:
ASPack v1.08.04

Code size:
22 KB (22,528 bytes)

Scan the_kmplayer_1432.exe - Powered by Reason Core Security