home

PandashanLauncher.exe

Pandashan Launcher

OLAVI INDUSTRY HK LIMITED

This is a setup program which is used to install the application. The file has been seen being downloaded from www.pandashan.com and multiple other hosts.
Publisher:
OLAVI INDUSTRY HK LIMITED

Product:
Pandashan Launcher

Version:
1.0.0.1

MD5:
c8a55cb940a6230cf2816597c93eb89a

SHA-1:
8b456730f54cbd7ea3a95abd4dfaf9b2c29c86ab

SHA-256:
7f153b33551ca68ec9050d9a75a98037db9ff7a9306738430978ec3bfe0dfbfc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 1:08:04 AM UTC  (today)

File size:
2.8 MB (2,932,736 bytes)

Product version:
1.0.0.1

Copyright:
Copyright © 2012

Original file name:
PandashanLauncher.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\pandashanlauncher.exe

File PE Metadata
Compilation timestamp:
10/18/2014 9:28:21 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:bZ1X2JvsfR1rgLLayiQVKxLGXuZqP9cSsQPpa112UyT0irF0Gi0lctGLzb7pWlNq:91X2vGrgLutAKxLGX6qP9c2UyvViGLzh

Entry address:
0x2B7B9E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 60, 00...
 
[+]

Entropy:
7.9357

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
2.7 MB (2,841,600 bytes)

The file PandashanLauncher.exe has been seen being distributed by the following 2 URLs.

https://www.pandashan.com/launcher/.../PandashanLauncher.exe

http://www.pandashan.com/launcher/.../PandashanLauncher.exe

Scan PandashanLauncher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.