How to remove bulletspassview.exe
- File Details
- Overview
- Analysis
bulletspassview.exe
The module bulletspassview.exe has been detected as Virtool.Gen
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
7f31636f9b74ab93a268f5a473066053 |
| Size: |
96 KB |
| First Published: |
2017-05-22 11:23:25 (6 years ago) |
| Latest Published: |
2023-02-09 23:20:16 (a year ago) |
| Status: |
Virtool.Gen (on last analysis) |
|
| Analysis Date: |
2023-02-09 23:20:16 (a year ago) |
Overview
| %desktop%\lock |
| %desktop%\lock\nir soft\nirsoft\x64 |
| %sysdrive%\$recycle.bin\s-1-5-21-3026355524-453306283-1535374647-1001\$rqg1g27\nirsoft\x64 |
| %desktop%\nirsoft_package_1.20.2\nirsoft\x64 |
| %sysdrive%\system tools\nirlauncher\nirlauncher.package.1.19.97\nirsoft\x64 |
| %profile%\downloads\nirsoft_package_1.20.2\nirsoft\x64 |
| %programfiles%\nirsoft\nirsoft\x64 |
| %localappdata%\microsoft\windows\inetcache\ie\8kkbgkhc\nirsoft_package_1.20.5[1].zip\nirsoft\x64 |
| %desktop%\nirsoft\nirsoft_package_1.19.119.zip\nirsoft\x64 |
| %desktop%\nirsoft\nirsoft_package_1.19.119\nirsoft\x64 |
| BulletsPassView.exe |
| bulletspassview.exe |
| A0014338.exe |
|
13.5% |
|
|
10.8% |
|
|
8.8% |
|
|
6.8% |
|
|
5.4% |
|
|
4.7% |
|
|
4.7% |
|
|
4.1% |
|
|
4.1% |
|
|
3.4% |
|
|
3.4% |
|
|
2.7% |
|
|
2.7% |
|
|
2.7% |
|
|
2.0% |
|
|
2.0% |
|
|
2.0% |
|
|
2.0% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
| Windows 10 |
59.3% |
|
| Windows 7 |
27.3% |
|
| Windows 8.1 |
9.3% |
|
| Windows Vista |
1.3% |
|
| Windows 8 |
1.3% |
|
| Windows Server 2003 |
0.7% |
|
| Windows Server 2016 |
0.7% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x0000f6b0 |
| Name |
Size of data |
MD5 |
| .text |
60416 |
28e80448bb33962fa10943ee64015440 |
| .rdata |
16384 |
e11eac02b6c17cbe8e330acfa6bca5aa |
| .data |
1024 |
d6006d12b88a4152b49dde0f4384f8aa |
| .pdata |
3072 |
178286fb0ff796d9832390159a70d456 |
| .rsrc |
10240 |
0f5d457f2eb154c3cc788589a8804446 |
