home

PasswordShield.exe

PasswordManager

LabPixels

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘PasswordShield’.
Publisher:
LabPixels  (signed and verified)

Product:
PasswordManager

Description:
Password Shield

Version:
1.7.8.0

MD5:
de4c014d8c965cd1f2d749d7bf6bc130

SHA-1:
c425919386d6f9744fa3137cfb4d32d6cfcd9c79

SHA-256:
4ac4312a2e2717aa76f86727a9187f9cdb95f9def1cfac7f4772bcbf57651c5a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 8:35:55 PM UTC  (today)

File size:
1.4 MB (1,436,584 bytes)

Product version:
1.7.8.0

Copyright:
Copyright © 2014

Original file name:
PasswordShield.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\password shield\passwordshield.exe

Digital Signature
Signed by:
LabPixels

Authority:
Symantec Corporation

Valid from:
4/29/2015 8:00:00 PM

Valid to:
4/29/2016 7:59:59 PM

Subject:
CN=LabPixels, O=LabPixels, L=Encino, S=California, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
51BF587B3EF79A298FC7EAB78550FA2F

File PE Metadata
Compilation timestamp:
3/14/2016 5:52:26 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:aCBnAMdL7ZGdsb5nKpfppikgmAuY8P8oyld6+1H/tGlHeGqVV0u0Ca1hswidQ:aCBwsWmwAuUBlD1f88GqVKu7aDsra

Entry address:
0x14608E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.3174

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.3 MB (1,327,616 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PasswordShield

Command:
"C:\Program Files\password shield\passwordshield.exe" minimized


Scan PasswordShield.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.