How to remove A0347899.exe

A0347899.exe

The module A0347899.exe has been detected as General Threat

A0347899.exe
Remove A0347899.exe

File Details

Product Name:

LSASecretsView
Company Name:

NirSoft
MD5: 1cad345d69a3fbc36348c7848169a94b
Size: 36 KB
First Published: 2017-05-27 13:04:21 (7 years ago)
Latest Published: 2023-02-09 23:18:33 (2 years ago)
Status: General Threat (on last analysis)
Analysis Date: 2023-02-09 23:18:33 (2 years ago)

Common Places:

%desktop%\nirsoft_package_1.20.2\nirsoft
%sysdrive%\system tools\nirlauncher\nirlauncher.package.1.19.97\nirsoft
%profile%\downloads\nirsoft_package_1.20.2\nirsoft
%programfiles%\nirsoft\nirsoft
%localappdata%\microsoft\windows\inetcache\ie\8kkbgkhc\nirsoft_package_1.20.5[1].zip\nirsoft
%profile%\downloads\ns\nirsoft_package_1.19.118\nirsoft_package_1.19.119.zip\nirsoft
%desktop%\nirsoft\nirsoft_package_1.19.119.zip\nirsoft
%profile%\downloads\ns\nirsoft_package_1.19.118.zip\nirsoft
%desktop%\nirsoft\nirsoft_package_1.19.119\nirsoft
%sysdrive%\windows_repair_toolbox\downloads\nirlauncher\nirsoft

File Names:

lsasecretsview.exe
A0347899.exe
lsasecretsview (1).exe
lsasecretsview (2).exe
LSASecretsView.exe
A0212726.exe

Geography:

17.1%
13.3%
8.5%
6.5%
4.8%
4.8%
4.4%
3.4%
3.4%
3.1%
2.7%
2.4%
2.4%
1.7%
1.7%
1.4%
1.4%
1.4%
1.0%
1.0%
1.0%
1.0%
1.0%
0.7%
0.7%
0.7%
0.7%
0.7%
0.7%
0.7%
0.7%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%

OS Version:

Windows 10 58.9%
Windows 7 33.0%
Windows XP 4.0%
Windows 8.1 3.7%
Windows 8 0.3%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000145e0

PE Sections:

Name Size of data MD5
UPX0 0 00000000000000000000000000000000
UPX1 30720 b0048e835f52d197895b2899311b38da
.rsrc 5120 62a6d61757e9e87ea1a5b300598081ef

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for A0347899.exe
copyright for information about A0347899.exe