» PMB.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

PMB.exe

Pando Media Booster

Pando Networks, Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Pando Media Booster’. This is installed with Pando Media Booster.

File name:

PMB.exe

Publisher:

Pando Networks, Inc. (signed and verified)

Product:

Pando Media Booster

Version:

2,3,6,0

MD5:

c7144387e236687f8fb3f26fc845a822

SHA-1:

e170b887b0b29e7f0608e12d0de89b027e626ab2

SHA-256:

5ee377fbba1c86f0144bcb4cf7a3ab76ac32c7267722867348853372ed9318c3

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 10:33:17 AM UTC (today)

File size:

2.9 MB (3,077,528 bytes)

Product version:

2,3,6,0

Original file name:

PMB.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\pando networks\media booster\pmb.exe

Digital Signature

Signed by:

Pando Networks, Inc.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

6/16/2010 6:00:00 PM

Valid to:

6/30/2011 5:59:59 PM

Subject:

CN="Pando Networks, Inc.", O="Pando Networks, Inc.", L=New York, S=New York, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

2F001A87D65FF9C4708B855F48B0DF1E

File PE Metadata

Compilation timestamp:

6/9/2011 3:12:58 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:hQ8fzjivZ5twObLmRREsf/T3nR2kvDvhlloT+mfvKD0zM3DbIZlm:Jj2Z5twObLmRV/N/vDv0ID

Entry address:

0x179F67

Entry point:

E8, 0C, 07, 00, 00, E9, 37, FD, FF, FF, CC, FF, 25, D8, 27, 5F, 00, 6A, 10, 68, 40, CC, 63, 00, E8, 60, 00, 00, 00, 33, C0, 89, 45, E0, 89, 45, FC, 89, 45, E4, 8B, 45, E4, 3B, 45, 10, 7D, 13, 8B, 75, 08, 8B, CE, FF, 55, 14, 03, 75, 0C, 89, 75, 08, FF, 45, E4, EB, E5, C7, 45, E0, 01, 00, 00, 00, C7, 45, FC, FE, FF, FF, FF, E8, 08, 00, 00, 00, E8, 67, 00, 00, 00, C2, 14, 00, 83, 7D, E0, 00, 75, 11, FF, 75, 18, FF, 75, E4, FF, 75, 0C, FF, 75, 08, E8, C0, FB, FF, FF, C3, CC, FF, 25, E4, 27, 5F, 00, 68, 3D, A0... 
[+]

Code size:

1.9 MB (2,032,128 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Pando Media Booster

Command:

C:\Program Files\pando networks\media booster\pmb.exe

The file PMB.exe has been discovered within the following programs.

Pando Media Booster by Pando Networks Inc.

Pando Media Booster (PMB) is an application by Pando Networks that is used by game and software publishers to ensure safe, complete and speedy downloads of large files. PMB is primarily used to download MMORPGs.

www.pandonetworks.com/pando-media-booster-support-faq

51% remove it

Scan PMB.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.