pal_install_r109860_a3000.exe

Paltalk Messenger Setup

Paltalk.com

This is a self-extracting archive and installer. The file has been seen being downloaded from download.paltalk.com.
Publisher:
AVM Software Inc.  (signed by Paltalk.com)

Product:
Paltalk Messenger Setup

Version:
11,7,646,17836

MD5:
ff176c1c0bbd5d65ce85632417378785

SHA-1:
684cef2e595377fa1d36f30cca41e76f7344a03c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:21:09 AM UTC  (today)

File size:
1.3 MB (1,392,439 bytes)

Product version:
11,7,646,17836

Copyright:
Copyright 1999 - 2014

Original file name:
paltalk_messenger_setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\documents and settings\administrateur\mes documents\downloads\pal_install_r109860_a3000.exe

Digital Signature
Signed by:

Authority:
Symantec Corporation

Valid from:
5/15/2015 2:00:00 AM

Valid to:
5/15/2018 1:59:59 AM

Subject:
CN=Paltalk.com, O=Paltalk.com, L=Jericho, S=New York, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
17B0C425187E4534E12B02B218563F46

File PE Metadata
Compilation timestamp:
9/5/2011 4:16:19 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:cmLcKsCFgJ8FNVsgNzoP6LPoZ0+mbZAeNPI60Yccn14RTSP6fi:vRNFgJoVsgNEKKjmbGekk12Sii

Entry address:
0x384F

Entry point:
BB, CF, 25, 03, 85, 93, E9, 20, 01, 00, 00, A6, 4C, AF, AB, 57, DB, AF, AB, F7, D6, 41, 2F, 2F, AF, 2F, 2F, F2, 2F, 2F, 2F, 8E, 60, 65, 60, 5F, 60, 68, 66, 65, 2F, 2F, 2F, A3, 90, A9, 94, 91, 90, 9C, 90, 5D, 93, 9B, 9B, 2F, 2F, 2F, 2F, 8B, 2F, 2F, 2F, 75, A1, 94, 94, 7B, 98, 91, A1, 90, A1, A8, 2F, 72, A1, 94, 90, A3, 94, 73, 98, A1, 94, 92, A3, 9E, A1, A8, 70, 2F, 2F, 2F, 2F, 76, 94, A3, 86, 98, 9D, 93, 9E, A6, A2, 73, 98, A1, 94, 92, A3, 9E, A1, A8, 70, 2F, 2F, 2F, 2F, 76, 94, A3, 7C, 9E, 93, A4, 9B, 94...
 
[+]

Code size:
27.5 KB (28,160 bytes)

The file pal_install_r109860_a3000.exe has been seen being distributed by the following URL.

Scan pal_install_r109860_a3000.exe - Powered by Reason Core Security