» pd_service.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

pd_service.exe

Password Depot Server 8

AceBIT GmbH

It runs as a separate (within the context of its own process) windows Service named “Password Depot Server 8”. This is installed with Password Depot Server 8.

File name:

pd_service.exe

Publisher:

AceBIT GmbH (signed and verified)

Product:

Password Depot Server 8

Description:

Password Depot Server - NT Service

Version:

8.0.4.0

MD5:

148a862df7345cd605d8a072dc0026dd

SHA-1:

7e2ecccf0a3900b4e3ac09bb662af5b880ca7cb6

SHA-256:

3227dad6adf06dc1f0688332728d4a55161abecfd1c5a1ccfcbed856ea6fe12a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 9:18:40 AM UTC (today)

File size:

1.5 MB (1,614,856 bytes)

Product version:

8.0.4

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

AceBIT GmbH

Authority:

COMODO CA Limited

Valid from:

2/26/2013 12:00:00 AM

Valid to:

2/26/2015 11:59:59 PM

Subject:

CN=AceBIT GmbH, O=AceBIT GmbH, STREET=Rheinstr. 40-42, L=Darmstadt, S=Hessen, PostalCode=64283, C=DE

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

72D724E6A3EDD1249B6984A3623B0A81

File PE Metadata

Compilation timestamp:

10/24/2014 2:31:14 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:5G/h4KomjD8Vhdhf3n+ynAFNQVKx9YpOB8XQgV94iEqp5BjWzXK5Cvt3jQC3tnrV:tKomjAhdJnVgyXQQyiekCVjQ8nBUA

Entry address:

0x1000

Entry point:

68, 01, 90, 84, 00, E8, 01, 00, 00, 00, C3, C3, 49, 8B, DA, 38, 4D, 52, B9, EF, 55, B5, 7C, F9, C7, 33, 91, 94, 8F, CB, 54, B6, 6E, C2, DC, 95, F2, 8C, 98, 1E, 4E, 60, C7, 20, 55, 6A, 8F, FE, 7B, 0A, BE, 53, 2A, 48, 66, A9, D3, 7B, 30, D1, EE, 4C, C4, 0E, 62, F1, ED, 16, 6B, 15, B3, 7C, 65, 58, 08, 6B, D4, 10, BF, 6E, 2E, 4E, 64, F9, 58, 4D, 9E, 46, D7, 81, 09, AA, 62, 70, 79, 69, 39, B2, 66, 84, F0, DB, 5C, B6, B9, DB, E9, E2, C5, 9F, 60, C7, 6F, 1A, B3, 99, 84, 0A, 24, 69, BC, B6, 48, 65, C3, BD, E0, 4B... 
[+]

Entropy:

7.9574

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

3.5 MB (3,677,696 bytes)

Service

Display name:

Password Depot Server 8

Service name:

PD_Service_8

Description:

Provides shared access to password files for Password Depot users.

Type:

Win32OwnProcess

The file pd_service.exe has been discovered within the following program.

Password Depot Server 8 by AceBIT GmbH

www.acebit.com

About 8% of users remove it

Scan pd_service.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.