How to remove hstart.exe
hstart.exe
The module hstart.exe has been detected as Risk.Gen
File Details
| Product Name: | Hidden Start |
| Company Name: | NTWind Software |
| MD5: | 42ebf20c11745b367094f1f10290091b |
| Size: | 163 KB |
| First Published: | 2018-04-21 12:10:01 (6 years ago) |
| Latest Published: | 2019-04-26 04:11:02 (5 years ago) |
| Status: | Risk.Gen (on last analysis) | |
| Analysis Date: | 2019-04-26 04:11:02 (5 years ago) |
Overview
| Signed By: | Avdonin Aleksandr Nikolaevich Ip |
| Status: | Valid |
Common Places:
| %programfiles% |
| %sysdrive%\programs |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
Geography:
| 26.3% | ||
| 21.1% | ||
| 10.5% | ||
| 10.5% | ||
| 10.5% | ||
| 10.5% | ||
| 10.5% |
OS Version:
| Windows 10 | 89.5% | |
| Windows 7 | 10.5% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x0000592e |
PE Sections:
| Name | Size of data | MD5 |
| .text | 66560 | 219216525fe824bf47eccde6c6027094 |
| .rdata | 33280 | 1d81feae049eb5e1957a1afe12f14420 |
| .data | 25600 | b6da4a08ef604bd00b713432666e33f9 |
| .gfids | 512 | 39d30eecd4a80f412e912405996a2c59 |
| .rsrc | 30208 | a914c57facb32cf2409301b459b09988 |
| .reloc | 5120 | 0f2ff6d316e114166d7ebd0da1a9b331 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for hstart.exe
