How to remove BulletsPassView.exe
- File Details
- Overview
- Analysis
BulletsPassView.exe
The module BulletsPassView.exe has been detected as Virtool.Gen
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
0c2ff48e3b0a62412c9b06c548707f37 |
| Size: |
95 KB |
| First Published: |
2017-06-06 14:07:28 (7 years ago) |
| Latest Published: |
2020-11-04 04:10:01 (4 years ago) |
| Status: |
Virtool.Gen (on last analysis) |
|
| Analysis Date: |
2020-11-04 04:10:01 (4 years ago) |
Overview
| %programfiles%\tools\nirsoft\bulletspassview v1.30 |
| %programfiles%\nirsoft_package_1.18.50\nirsoft\x64 |
| %desktop%\forensik\dart @amp; deft\dart\dart\apps\passwordrecovery |
| %sysdrive%\win-forensics-tools\password recovery |
| %sysdrive%\apple_mb\tools\14.nirsoft_package\nirsoft |
| %sysdrive%\systeme\easycmdplus\nirlauncher\nirsoft |
| %sysdrive%\!portable apps\geek toolkit (essential software programs installer and launcher)\gegeek toolkit\nirlauncher\nirsoft |
| %sysdrive%\!portable apps\geek toolkit (essential software programs installer and launcher)\gegeek toolkit\wsccportable |
| %sysdrive%\!portable apps\geek toolkit (essential software programs installer and launcher)\gegeek toolkit\wsccportable\nirsoft utilities |
| %sysdrive%\portablemoysuite\nirlauncher package 1.18.26 + sysinternals suite + piriform portable by punsh\app\nirlauncher\nirsoft |
| bulletspassview.exe |
| BulletsPassView.exe |
| BulletsPassView (2014_12_13 15_28_17 UTC).exe |
| BulletsPassView64.exe |
| BulletsPassView-x64.exe |
|
16.9% |
|
|
15.3% |
|
|
10.2% |
|
|
10.2% |
|
|
5.1% |
|
|
5.1% |
|
|
5.1% |
|
|
5.1% |
|
|
3.4% |
|
|
3.4% |
|
|
3.4% |
|
|
3.4% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
|
1.7% |
|
| Windows 7 |
49.2% |
|
| Windows 10 |
47.5% |
|
| Windows 8.1 |
3.4% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x0000f4b0 |
| Name |
Size of data |
MD5 |
| .text |
59904 |
7fd5b896dec217b407247555fb4be7e5 |
| .rdata |
15872 |
2baf4485cafade6c930e27600711f4eb |
| .data |
1024 |
036bb4399c178bb02585b39cfa100fdf |
| .pdata |
3072 |
c400536945cd94953fee7e0a03a55d46 |
| .rsrc |
10240 |
4c11b0a1371faa7611ce3586fe2b6abe |
