hone.exe threat report

MD5 82471921adfb8d22f0aedcc468cc8b2c
Latest seen 2023-11-20 23:52:18 (2 years ago)
First seen 2023-11-20 23:52:18 (2 years ago)
Size 151 MB
Publisher AuraSide Inc
Product Hone
Signed by AuraSide, Inc

This report summarizes the file identity, detection status, publisher metadata, observed locations, and technical indicators for hone.exe. ThreatInfo currently classifies this sample as Possible Threat.

GridinSoft Anti-Malware detection

GridinSoft already detects this file

The latest ThreatInfo record shows hone.exe detected as Possible Threat. You can download GridinSoft Anti-Malware to scan the system and remove this detection if the file is present on your device.

Detection name
Possible Threat
Last analysis
2023-11-20 23:52:18 (2 years ago)
File hash
82471921adfb8d22f0aedcc468cc8b2c
Download Anti-Malware

hone.exe is a Windows file recorded in the ThreatInfo database. It is associated with Hone. The reported company name is AuraSide Inc. The current detection status is Possible Threat, based on the latest analysis from 2023-11-20 23:52:18 (2 years ago).

If hone.exe appears on your computer unexpectedly, treat it as suspicious. Check its location, digital signature, and recent system changes before allowing it to run. A full anti-malware scan is recommended when this file is detected as Possible Threat.

Product Name: Hone
Company Name: AuraSide Inc
MD5: 82471921adfb8d22f0aedcc468cc8b2c
Size: 151 MB
First Published: 2023-11-20 23:52:18 (2 years ago)
Latest Published: 2023-11-20 23:52:18 (2 years ago)
Status: Possible Threat (on last analysis)
Analysis Date: 2023-11-20 23:52:18 (2 years ago)
hone.exe detection screenshot

The screenshot is a visual record of a GridinSoft Anti-Malware detection for this sample. Use the hash and metadata above as the primary identifiers when comparing the file on your system.

Signed By: AuraSide, Inc
Status: Valid

The signature on hone.exe is reported as valid. A valid signature helps confirm publisher identity, but it does not automatically make the file safe if the installer was bundled, abused, or downloaded from an untrusted source.

%localappdata%\programs

ThreatInfo has observed hone.exe in the locations listed above. Files found in temporary folders, user profile folders, startup locations, or unusual application directories should be reviewed more carefully than files installed under a known program directory.

100.0%

The strongest geographic signal for this file is Canada with 100.0% of observed hits. Geographic distribution can help identify targeted campaigns, regional software bundles, or where a file is most commonly reported.

Windows 10 100.0%

The most common operating system signal for hone.exe is Windows 10 with 100.0% of observed hits. If your system differs from the common profile, check whether the file was introduced by a specific installer, archive, or removable device.

hone.exe is identified as pe for 64 systems. The subsystem is Windows GUI. PE header values are useful for triage, especially when they do not match the expected publisher, product, or release timeline.

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x0404aad0

PE Sections:

Name Size of data MD5
.text 128364032 3b2f2e6d78089fa2ea235bc9c9b0f29e
.rdata 24751616 dde8daac5fcdd14a1ab8df973cf33326
.data 691200 94968971342fcd7135115ff0f4236890
.pdata 4093440 14b48e1e755e62a97c3f3679921ea629
.00cfg 512 8f81afacbbcced8988df50d775c0eeab
.gxfg 16896 b19bd29aa5d5dce839eeed703d7451d3
.retplne 512 83f40cfa33907cbb61b62331bb6a53cb
.rodata 4608 e5c4f94e5f0f18c0a0c02e29f559138d
.tls 1024 3540e4fa9ead49b55e3604a8b9ec6d37
.voltbl 512 a3c251baa31d5e55e2ec45f9019f79e1
CPADinfo 512 60d3ea61d541c9be2e845d2787fb9574
_RDATA 512 969438373e4feeb568b00bda9a8f4244
malloc_h 512 aeda24617b42bd08516231bac57ba9e9
.rsrc 81920 fa4ac704caf13ce9f190783282610e18
.reloc 987136 d37c4a08f5f913e62a95aede13b70204

PE section names and hashes can reveal packing, injected resources, or unusual build artifacts. Sections with uncommon names, very large raw data, or hashes that differ from a trusted copy deserve additional review.

More information: