How to remove netpass.exe

netpass.exe

The module netpass.exe has been detected as Trojan.Agent

netpass.exe
Product Name:

Network Password Recovery

Company Name:

NirSoft

MD5: f627c30429d967082cdcf634aa735410
Size: 124 KB
First Published: 2019-10-15 09:15:27 (5 years ago)
Latest Published: 2021-01-13 03:12:18 (4 years ago)
Status: Trojan.Agent (on last analysis)
Analysis Date: 2021-01-13 03:12:18 (4 years ago)
Signed By: Nir Sofer
Status: Invalid (digital signature could be stolen or file could be patched)
%sysdrive%\utils\winrepairtools.zip\winrepairtools\downloads\nirlauncher\nirsoft
%sysdrive%\system\winrepairtools\downloads\nirlauncher\nirsoft
%desktop%\cartelle\attività quotidiane\manutenzione\windows_repair_toolbox\downloads\nirlauncher\nirsoft
%sysdrive%\$recycle.bin\s-1-5-21-1068676493-303544660-264548255-1001\$rwrmrbo.rar\nirlauncher.package.1.22.9.karanpc\nirsoft
%desktop%\торренты\nirlauncher package 1.23.20 portable\nirsoft
%commonappdata%\ninjustu-win-menu\password attacks
%sysdrive%\tools\nirlauncher\nirsoft
%profile%\downloads\qwert\mimik
%sysdrive%\kheyriye\new folder\windows_repair_toolbox\downloads\nirlauncher\nirsoft
%sysdrive%\downloads\torrent\done\adminpe10_uefi\adminpe10_uefi\adminpe32\peprograms\nirsoft.exe\programs\nirsoft
22.2%
11.1%
11.1%
11.1%
5.6%
5.6%
5.6%
5.6%
5.6%
5.6%
5.6%
5.6%
Windows 10 70.0%
Windows 7 15.0%
Windows 8.1 10.0%
Windows Server 2016 5.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x00012ea0

PE Sections:

Name Size of data MD5
.text 74752 f70d4decbeb61eee8eeac9e0d03f825f
.rdata 15360 70c8c50493c44906360088f734fd4b28
.data 3072 79229d3171cc5e075d96fb39b04c84b6
.pdata 3584 c1be342664dac9ff6452e837616242b8
.rsrc 17920 3c0f177f013fdf1a305619054fdf179c

More information:

Download GridinSoft Anti-Malware - Removal tool for netpass.exe