How to remove hndclient.exe
- File Details
- Overview
- Analysis
hndclient.exe
The module hndclient.exe has been detected as Trojan.Downloader
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
01a0eac71ee58ac75ec12773c7ec6bd9 |
| Size: |
8 MB |
| First Published: |
2017-08-20 15:06:35 (6 years ago) |
| Latest Published: |
2019-10-21 03:04:12 (4 years ago) |
| Status: |
Trojan.Downloader (on last analysis) |
|
| Analysis Date: |
2019-10-21 03:04:12 (4 years ago) |
Overview
| %programfiles%\handycafe\client |
| %programfiles%\handycafe |
| %programfiles%\handycafe |
| %programfiles%\handycafe |
|
28.6% |
|
|
21.4% |
|
|
14.3% |
|
|
14.3% |
|
|
7.1% |
|
|
7.1% |
|
|
7.1% |
|
| Windows 7 |
64.3% |
|
| Windows 10 |
21.4% |
|
| Windows XP |
14.3% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x004f8b00 |
| Name |
Size of data |
MD5 |
| .text |
5112832 |
e6db7e5b0f28e458154996d21d746737 |
| .itext |
93696 |
577b26a563b1112f6ff441e9b6183bf5 |
| .data |
94208 |
d9ad651c4097e326a92b715f537da3ff |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
28672 |
4d076cc5759eb7cb64963a4376793e44 |
| .didata |
3072 |
74cfb4d41d96d3786339701b2b316cdc |
| .edata |
512 |
e64d1b678eda7465caae3c7af9dbfdb4 |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
51efc9c5effe3ebc54df0ae7f97410d9 |
| .reloc |
433152 |
778cf65e521401ccf7188d1a56d921d5 |
| .rsrc |
2903552 |
9511d2e546b3f76593477a386a8d63f1 |
