» Password Recovery Bundle.exe
Overview
Analysis
File Details
Programs (1)

Password Recovery Bundle.exe

Password Recovery Bundle

Top Password Software,Inc.

This file is installed with the program Password Recovery Bundle 2014.

File name:

Publisher:

Top Password Software, Inc. (signed by Top Password Software,Inc.)

Product:

Password Recovery Bundle

Description:

Find lost or forgotten password easily

Version:

3.20

MD5:

8d4602f4e17e6e69195ffe97944c655c

SHA-1:

adc4a19752c4e87dc5bf33d0a62f018f5aa96285

SHA-256:

00998a303a84684e61e21c9934bf483290fb3075360e3175ad326a2899d8fd2e

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/26/2024 5:00:10 AM UTC (today)

Scan engine

Detection

Engine version

Rising Antivirus

PE:Trojan.DL.QQHelper!1.65F5

23.00.65.14920

File size:

1.8 MB (1,878,304 bytes)

Product version:

3.20

Original file name:

Password Recovery Bundle.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\top password\password recovery bundle.exe

Digital Signature

Signed by:

Top Password Software,Inc.

Authority:

VeriSign, Inc.

Valid from:

9/18/2013 2:00:00 AM

Valid to:

9/19/2014 1:59:59 AM

Subject:

CN="Top Password Software,Inc.", OU=IT Dept, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Top Password Software,Inc.", L=FOSHAN, S=GUANGDONG, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3C88851F157DA16CF16A6FB34AB302AD

File PE Metadata

Compilation timestamp:

8/8/2014 5:39:16 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

24576:3gH31/voqukmaeg7zXnSytOzPchdp0PMtXwB6UhBhg5bTEaltAQ1GVCU:M3Zoqu9N8OgpXwgUhBYTEaltLGVCU

Entry address:

0x486F8

Entry point:

E8, 70, AF, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 10, 53, FF, 75, 10, 8D, 4D, F0, E8, 7B, AF, FF, FF, 8B, 45, 08, 33, DB, 3B, C3, 75, 28, E8, 63, F9, FF, FF, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 17, 8A, FF, FF, 83, C4, 14, 38, 5D, FC, 74, 07, 8B, 45, F8, 83, 60, 70, FD, 33, C0, EB, 74, 56, 8B, 75, F4, 39, 5E, 08, 75, 3A, FF, 75, 0C, 50, E8, 77, B3, FF, FF, 59, 59, EB, 41, 0F, B6, D1, F6, 44, 32, 1D, 04, 74, 1A, 40, 8A, 10, 3A, D3, 74, 3E, 0F, B7, C9, 0F, B6, D2, C1, E1, 08, 0B... 
[+]

Code size:

1 MB (1,062,400 bytes)

The file Password Recovery Bundle.exe has been discovered within the following program.

Password Recovery Bundle 2014 by Top Password Software, Inc.

www.top-password.com

About 8% of users remove it

Scan Password Recovery Bundle.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.