home

PasswordManager.exe

BEW20 SCE PasswordManager Module

FRANCE TELECOM

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Start_PasswordManager_{F8D68285-DD92-4ee1-9658-EEAF90E039F5}’.
Publisher:
FRANCE TELECOM  (signed and verified)

Product:
BEW20 SCE PasswordManager Module

Description:
Business Everywhere SCE Password Manager

Version:
2.0.0.0

MD5:
81c14ec9c397c92d7c77ecff89e92970

SHA-1:
779c4c2224abbf51c386272afde9adefc84b3e69

SHA-256:
c7dc96869b9fcd43ff082c98a819ec1eadb57a7b0dca76345f09e4e6dd43e948

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 4:02:57 PM UTC  (today)

File size:
369.4 KB (378,264 bytes)

Product version:
BEW20SCE R1S2A

Copyright:
Copyright France Telecom

Original file name:
PasswordManager.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\orangebusinessservices\gestionnaire de mot de passe\{f8d68285-dd92-4ee1-9658-eeaf90e039f5}\passwordmanager.exe

Digital Signature
Signed by:
FRANCE TELECOM

Authority:
Thawte, Inc.

Valid from:
3/18/2011 1:00:00 AM

Valid to:
5/17/2013 1:59:59 AM

Subject:
CN=FRANCE TELECOM, OU=FT/OLNC/RD/MAPS/POSS/NEC, O=FRANCE TELECOM, L=PARIS, S=PARIS, C=FR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2497FB119C7AD3539EFDDCE409234ED9

File PE Metadata
Compilation timestamp:
1/8/2013 10:21:23 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:q49NVQnYXyFuS7f0tQorzuKvSIIWgr4wCbEzhumAhOfGFrCm:q49NVQnYXyFuS7cjzuKvKWC4wCkwXmwB

Entry address:
0x2D8B4

Entry point:
E8, BF, 03, 00, 00, E9, 37, FD, FF, FF, FF, 25, 24, 33, 43, 00, 68, 40, D4, 42, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 74, 60, 44, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 90, 65, 46, 00, 89, 0D, 8C, 65, 46, 00, 89...
 
[+]

Code size:
198 KB (202,752 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Start_PasswordManager_{F8D68285-DD92-4ee1-9658-EEAF90E039F5}

Command:
C:\Program Files\orangebusinessservices\gestionnaire de mot de passe\{f8d68285-dd92-4ee1-9658-eeaf90e039f5}\passwordmanager.exe


Scan PasswordManager.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.