» passwarekitforensic.exe
Overview
Analysis
File Details

passwarekitforensic.exe

Passware Kit

Passware, Inc.

File name:

Publisher:

Passware (signed by Passware, Inc.)

Product:

Passware Kit

Description:

All-in-one password recovery and encryption scanning tool

Version:

9.5.1346

MD5:

b5c4742969c4c49989b8a4f83d040190

SHA-1:

7958a746e1ead3bfaea4496fee443c4257700539

SHA-256:

b0d1c758ba49358014d192218a233b25de68ae8fcdf2c6774ef5ec7680e69ce6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 4:14:37 PM UTC (today)

File size:

38.8 MB (40,656,928 bytes)

Product version:

9.5.1346

Original file name:

PasswareKit.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Passware, Inc.

Authority:

The USERTRUST Network

Valid from:

9/1/2009 5:30:00 AM

Valid to:

9/2/2010 5:29:59 AM

Subject:

CN="Passware, Inc.", O="Passware, Inc.", STREET=800 W El Camino Real, STREET=Ste 180, L=Mountain View, S=CA, PostalCode=94040, C=US

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

4AC3220D497190C94EF8B49C98441C08

File PE Metadata

Compilation timestamp:

1/19/2010 12:41:13 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

393216:4Ai3y6lnRvzCqmGQ6y7eJ/aZqhuwJ4fCBjwkK3pXRb7m74dqU4FzEoSmmLepUABU:49hBmGQ/7e6GFJ0BkKZBH3YjI7M+

Entry address:

0x298508B

Entry point:

E9, C3, 81, D5, FD, 6F, 86, 25, 4D, 57, 11, 49, 27, C2, 54, 67, A6, 99, 39, 17, 41, C0, EA, B6, A1, C2, B4, 67, EB, 50, 4B, 4C, 49, 54, 45, 33, 32, 20, 43, 6F, 70, 79, 72, 69, 67, 68, 74, 20, 31, 87, 1C, 24, E8, AE, 6E, FA, FF, 5A, 8E, 86, 58, 0F, 8A, 93, 48, 0C, 00, 89, 3C, 24, 5F, 0F, B6, 85, A2, B3, FE, FF, C1, F8, 05, E9, E7, 2A, 8C, FF, E8, 05, 2A, B7, FF, E9, 0B, AC, D9, FD, E9, 91, 8E, DB, FF, E9, 90, AF, 8C, FF, 81, F2, 62, A1, 17, BD, E9, 38, 45, D4, FF, 53, 68, D4, 84, 44, F9, 5B, C1, C3, 1B, 81... 
[+]

Entropy:

6.5042

Packer / compiler:

Xtreme-Protector v1.05

Code size:

10.1 MB (10,563,584 bytes)

Scan passwarekitforensic.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.