» stpass.exe
Overview
Analysis
File Details
Behaviors (1)

stpass.exe

Sticky Password

Lamantine Software a.s.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘StickyPassword’.

File name:

stpass.exe

Publisher:

Lamantine Software a.s. (signed and verified)

Product:

Sticky Password

Description:

Sticky Password Manager

Version:

5.0.6.247

MD5:

9ea56c3af91e2483d7d29efb706864d9

SHA-1:

b7f95c49af5626864723c48605b170f2297e304f

SHA-256:

55ae92b0ac8349d172bca66260771d1047129ea39bb7e99d3d60e006aa7a7c37

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/25/2024 8:52:48 AM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.ASPack

0.98/18155

File size:

2.8 MB (2,906,456 bytes)

Product version:

5.0.6.247

Original file name:

stpass.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\sticky password\stpass.exe

Digital Signature

Signed by:

Lamantine Software a.s.

Authority:

VeriSign, Inc.

Valid from:

8/16/2010 2:00:00 AM

Valid to:

10/23/2012 1:59:59 AM

Subject:

CN=Lamantine Software a.s., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Lamantine Software a.s., L=Brno, S=Jihomoravsky kraj, C=CZ

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

591E1649CD86C3ED3764C0AC87018CB5

File PE Metadata

Compilation timestamp:

1/27/2012 2:31:15 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:l6i0wpFbzzRM70Z44Pg4rpZVkeq5GE6Ic/Q+xj6tnV9+1B3wvnsV/qpRVD5TR+Y5:IiRRMQP7rjieytGQ0jcVOgExqpRVD5dZ

Entry address:

0x1000

Entry point:

68, 01, A0, B4, 00, E8, 01, 00, 00, 00, C3, C3, B8, 5F, 43, C0, 77, FD, C9, 1D, 03, D0, 26, 16, 94, CD, BC, CB, 48, 1F, 4B, 89, EE, 7E, EC, 86, CB, 65, 82, 9B, 50, 6A, 4F, B5, 28, 77, 4C, 4F, D9, 52, E8, 19, 22, 4E, 70, 65, 8F, B2, 5C, 17, 6D, 0A, 19, 37, 2F, 8C, 82, 6C, 12, 63, 19, BC, 4A, 22, 28, 76, F3, 8A, 27, C5, 84, 01, CE, 56, 1D, 0D, 17, BC, 53, 94, BE, 4B, 93, 0D, F8, 3C, 4F, CC, 2C, 5F, 03, EE, FF, 24, D6, 83, 86, DC, 78, BD, 90, 66, 08, 1F, 21, 6D, 04, 9C, 8E, C5, 2C, 3F, 43, 57, D9, DB, D7, EB... 
[+]

Entropy:

7.9398

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

3.7 MB (3,848,704 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

StickyPassword

Command:

C:\Program Files\sticky password\stpass.exe

Scan stpass.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.