hnsnm3.exe

LLC

The application hnsnm3.exe by LLC has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a windows Service named “HSystem”.
Publisher:
LLC   (signed and verified)

MD5:
f7f3ec49192a80994116172516c2e215

SHA-1:
c57be9378774f02b2e16e0e0beff6552bc86887e

SHA-256:
415f18eb09bc507eaf43a10c7f822dfcc31b25119845ce0611ca15dbc7e58c6a

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/15/2024 3:51:05 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Amonitize (M)
16.3.3.0

File size:
153.7 KB (157,432 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\defsoft\hnsnm3.exe

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
12/8/2015 3:00:00 AM

Valid to:
12/8/2016 2:59:59 AM

Subject:
CN="LLC ""BARSA AYTI""", OU=IT, O="LLC ""BARSA AYTI""", STREET="vul. KURSKA, 10", L=Kiev, S=Kiev, PostalCode=03049, C=UA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00FF81B115478974CFF89662B788ACA6FF

File PE Metadata
Compilation timestamp:
2/11/2016 12:56:03 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
384:gVPVYKMW2edyb4htpjA2G+RItavKWBD7UA9SkgkybDQDi+riANey:gBCvveEgbrvKWBD3Zy3QDvik

Entry address:
0xB1C7

Code size:
97 KB (99,328 bytes)

Service
Display name:
HSystem

Type:
Win32OwnProcess, InteractiveProcess


Remove hnsnm3.exe - Powered by Reason Core Security