PwDump.exe

pwdump6

Foofus Networking

Scan PwDump.exe - Powered by Reason Core Security
Publisher:
Foofus Networking

Product:
pwdump6

Description:
Password dumping utility

Version:
1, 4, 2, 0

MD5:
8727ae64b3f841d6a5012318e102ddfc

SHA-1:
7068dfda753b1c0b9642a261443c7095cf66b2c6

SHA-256:
0e4145cf67e1d91680fcb35a87000d60697ca98fff3c51817eda52327112694e

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
12/6/2016 1:19:09 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/PSWTool.PWDump6 (variant)
8.7988

File size:
560.1 KB (573,497 bytes)

Product version:
1, 4, 2, 0

Copyright:
Copyright 2006 Foofus Networking

Trademarks:
Licensed under the GPL - see COPYING for more details

Original file name:
PwDump.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
10/12/2006 10:25:07 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
6.0

CTPH (ssdeep):
6144:iKoR00nCZoKBrjbuZBGXYGMxs9m3MgYo8PPmWQ15Jrmbz1jHUyAL5:iHbnC1ZjbuZBGTr4YokmB5Jrmf1j+L5

Entry address:
0xE180

Entry point:
55, 8B, EC, 6A, FF, 68, D0, 69, 47, 00, 68, 64, 0B, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, C4, F0, 53, 56, 57, 89, 65, E8, FF, 15, 48, 84, 48, 00, A3, 98, 54, 48, 00, A1, 98, 54, 48, 00, C1, E8, 08, 25, FF, 00, 00, 00, A3, A4, 54, 48, 00, 8B, 0D, 98, 54, 48, 00, 81, E1, FF, 00, 00, 00, 89, 0D, A0, 54, 48, 00, 8B, 15, A0, 54, 48, 00, C1, E2, 08, 03, 15, A4, 54, 48, 00, 89, 15, 9C, 54, 48, 00, A1, 98, 54, 48, 00, C1, E8, 10, 25, FF, FF, 00, 00, A3, 98, 54, 48, 00, 6A, 01, E8, DD...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
460 KB (471,040 bytes)

Scan PwDump.exe - Powered by Reason Core Security