Your impression is correct .
NirSoft does have other utilities that do " decrypt " passwords , but this one does not.
Just to throw out another thought about why a lot of anti-virus companies flag his utilities , might it have anything to do with the fact that they make it easy to track just what the programs are doing ?
Na that couldn't have anything to do with it , all anti-virus companies are completely honest and above board