home

pstpassword.exe

PstPassword

NirSoft

This is installed with NirSoft PstPassword. The file has been seen being downloaded from www.nirsoft.net.
Publisher:
NirSoft

Product:
PstPassword

Description:
PST Password Recovery

Version:
1.17

MD5:
886526e9c5c2dc7287d7f169d8c1a243

SHA-1:
c420d2bdfa4df4fde865e0c8e8dc40e19906166a

SHA-256:
94ff8fb29b20cbf3ffa5fa2a6212eb1ad13ea660a4b170098a1be740f63ab289

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
4/19/2024 11:54:57 PM UTC  (a few moments ago)

File size:
34 KB (34,816 bytes)

Product version:
1.17

Copyright:
Copyright © 2006 - 2014 Nir Sofer

Original file name:
PstPassword

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\pstpassword.exe

File PE Metadata
Compilation timestamp:
9/17/2014 4:41:51 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
768:yNJa8a9PGcKa3ldgms3Em+mLh/+RVIQMuO884ItCXFXrnYzad:yN89PGcjkmeEm+mh/+RVRMuOcYzad

Entry address:
0x11D20

Entry point:
60, BE, 00, B0, 40, 00, 8D, BE, 00, 60, FF, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75...
 
[+]

Entropy:
7.4486

Packer / compiler:
UPX 2.90LZMA

Code size:
28 KB (28,672 bytes)

The file pstpassword.exe has been discovered within the following program.

NirSoft PstPassword  by NirSoft
Publisher's description - “PstPassword is a small utility that recover lost password of Outlook .PST (Personal Folders) file. This utility can recover the PST passwords of Outlook 97, Outlook 2000, Outlook XP, Outlook 2003, and Outlook 2007. You don't have to install MS-Outlook in order to use this utility.”
www.nirsoft.net/utils/pst_password.html
7% remove it
 
Powered by Should I Remove It?

The file pstpassword.exe has been seen being distributed by the following URL.

http://www.nirsoft.net/.../pstpassword.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.