What is hnshC5F2.tmp?

hnshC5F2.tmp is usually located in the 'C:\Program Files (x86)\31444335-1447063399-3031-4B32-EC9A744B74C7\' folder.

Some of the anti-virus scanners at VirusTotal detected hnshC5F2.tmp.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

VirusTotal report

51 of the 69 anti-virus programs at VirusTotal detected the hnshC5F2.tmp file. That's a 74% detection rate.

Scanner	Detection Name
Ad-Aware	Gen:Variant.Adware.ConvertAd.16
AhnLab-V3	PUP/Win32.ConvertAd.C2640872
Alibaba	AdWare:Win32/ConvertAd.2488b8c5
ALYac	Gen:Variant.Adware.ConvertAd.16
Antiy-AVL	GrayWare[AdWare]/Win32.ConvertAd
APEX	Malicious
Arcabit	Trojan.Adware.ConvertAd.16
Avast	Win32:Adware-gen [Adw]
AVG	Win32:Adware-gen [Adw]
Avira	ADWARE/ConvertAd.Gen7
BitDefender	Gen:Variant.Adware.ConvertAd.16
BitDefenderTheta	Gen:NN.ZexaF.34196.zqW@aGtNrGc
Bkav	W32.AIDetectVM.malware2
Comodo	ApplicUnwnt@#2zlm28dvr7xf8
CrowdStrike	win/malicious_confidence_60% (W)
Cybereason	malicious.998f6b
Cylance	Unsafe
Cynet	Malicious (score: 100)
DrWeb	Adware.ConvertAd.90
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Adware.ConvertAd.ACH
F-Secure	Adware.ADWARE/ConvertAd.Gen7
FireEye	Generic.mg.b963b83998f6bd18
GData	Gen:Variant.Adware.ConvertAd.16
Invincea	heuristic
Jiangmin	AdWare.ConvertAd.asf
K7AntiVirus	Adware ( 004d65d71 )
K7GW	Adware ( 004d65d71 )
Kaspersky	not-a-virus:AdWare.Win32.ConvertAd.biu
MAX	malware (ai score=99)
McAfee	RDN/Generic PUP.acy
Microsoft	Trojan:Win32/Occamy.C1F
MicroWorld-eScan	Gen:Variant.Adware.ConvertAd.16
NANO-Antivirus	Riskware.Win32.ConvertAd.dypglf
Panda	Trj/Genetic.gen
Qihoo-360	Generic/HEUR/QVM10.2.FFF9.Malware.Gen
Rising	Trojan.Detplock!8.4A0D (CLOUD)
Sangfor	Malware
SentinelOne	DFI - Suspicious PE
Sophos	Generic PUA HN (PUA)
SUPERAntiSpyware	PUP.ConvertAd/Variant
Symantec	PUA.VOPackage
Tencent	Malware.Win32.Gencirc.114c653f
TrendMicro	TROJ_GEN.R002C0OHE20
TrendMicro-HouseCall	TROJ_GEN.R002C0OHE20
VBA32	AdWare.ConvertAd
VIPRE	Trojan.Win32.Generic!BT
Webroot	W32.Adware.Gen
Yandex	PUA.ConvertAd!
Zillya	Adware.ConvertAD.Win32.30401
ZoneAlarm	not-a-virus:AdWare.Win32.ConvertAd.biu

Sandbox Report

The following information was gathered by executing the file inside Cuckoo Sandbox.

Summary

Successfully executed process in sandbox.

Generic

[
    {
        "process_path": "C:\\Users\\cuck\\AppData\\Local\\Temp\\1f24b8b6d1071c2f102ce6823a2ebcc69063fc71d1d702bab40d307c82bac81d.bin",
        "process_name": "1f24b8b6d1071c2f102ce6823a2ebcc69063fc71d1d702bab40d307c82bac81d.bin",
        "pid": 1268,
        "summary": {},
        "first_seen": 1598640785.609375,
        "ppid": 2308
    },
    {
        "process_path": "C:\\Windows\\System32\\lsass.exe",
        "process_name": "lsass.exe",
        "pid": 476,
        "summary": {},
        "first_seen": 1598640785.34375,
        "ppid": 376
    }
]

Signatures

[]

Yara

The Yara rules did not detect anything in the file.

Network

{
    "tls": [],
    "udp": [
        {
            "src": "192.168.56.101",
            "dst": "192.168.56.255",
            "offset": 546,
            "time": 3.126873016357422,
            "dport": 137,
            "sport": 137
        },
        {
            "src": "192.168.56.101",
            "dst": "192.168.56.255",
            "offset": 5226,
            "time": 9.203679084777832,
            "dport": 138,
            "sport": 138
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 7070,
            "time": 3.034001111984253,
            "dport": 5355,
            "sport": 51001
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 7398,
            "time": 1.0130679607391357,
            "dport": 5355,
            "sport": 53595
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 7726,
            "time": 3.079214096069336,
            "dport": 5355,
            "sport": 53848
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 8054,
            "time": 1.5182850360870361,
            "dport": 5355,
            "sport": 54255
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 8382,
            "time": -0.09909605979919434,
            "dport": 5355,
            "sport": 55314
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 8710,
            "time": 1.532120943069458,
            "dport": 1900,
            "sport": 1900
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 28120,
            "time": 1.043015956878662,
            "dport": 3702,
            "sport": 49152
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 36504,
            "time": 3.128612995147705,
            "dport": 1900,
            "sport": 53598
        }
    ],
    "dns_servers": [],
    "http": [],
    "icmp": [],
    "smtp": [],
    "tcp": [],
    "smtp_ex": [],
    "mitm": [],
    "hosts": [],
    "pcap_sha256": "0b37a1d1118dbcec61de82065db8ad5051534540195fdcaa61a4f6b7d8a40cf3",
    "dns": [],
    "http_ex": [],
    "domains": [],
    "dead_hosts": [],
    "sorted_pcap_sha256": "9918d0aed326da3baf6631871ce367cbd74b262c137a3c8cf90d792583dce98e",
    "irc": [],
    "https_ex": []
}

Screenshots

hnshC5F2.tmp removal instructions

The instructions below shows how to remove hnshC5F2.tmp with help from the FreeFixer removal tool. Basically, you install FreeFixer, scan your computer, check the hnshC5F2.tmp file for removal, restart your computer and scan it again to verify that hnshC5F2.tmp has been successfully removed. Here are the removal instructions in more detail:

1. Download and install FreeFixer: http://www.freefixer.com/download.html
2. Start FreeFixer and press the Start Scan button. The scan will finish in approximately five minutes.

   
3. When the scan is finished, locate hnshC5F2.tmp in the scan result and tick the checkbox next to the hnshC5F2.tmp file. Do not check any other file for removal unless you are 100% sure you want to delete it. Tip: Press CTRL-F to open up FreeFixer's search dialog to quickly locate hnshC5F2.tmp in the scan result.

   

   

   C:\Program Files (x86)\31444335-1447063399-3031-4B32-EC9A744B74C7\hnshC5F2.tmp

   
4. Scroll down to the bottom of the scan result and press the Fix button. FreeFixer will now delete the hnshC5F2.tmp file.

   
5. Restart your computer.
6. Start FreeFixer and scan your computer again. If hnshC5F2.tmp still remains in the scan result, proceed with the next step. If hnshC5F2.tmp is gone from the scan result you're done.
7. If hnshC5F2.tmp still remains in the scan result, check its checkbox again in the scan result and click Fix.
8. Restart your computer.
9. Start FreeFixer and scan your computer again. Verify that hnshC5F2.tmp no longer appear in the scan result.

• Privacy Policy