home

hotspot-shield-4.15.1.exe

The executable hotspot-shield-4.15.1.exe has been detected as malware by 1 anti-virus scanner. The file has been seen being downloaded from b.digallstateinfinity.info.
MD5:
55e8aeca4406f9b8dd5cae5039a36842

SHA-1:
340dbaff758a51ce08ce012d8736d3abb605d78e

SHA-256:
563b55e59b68b54f880ce5b87f1fc7c4b2439042a0a0e808c6b1e069575f8499

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
1/14/2025 9:10:54 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Threat.Win.Reputation.IMP
16.3.27.21

File size:
2.4 MB (2,564,608 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\hotspot-shield-4.15.1.exe

File PE Metadata
Compilation timestamp:
8/18/2012 2:17:46 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:p+PyKGbG3pCVmQ4UcTHGvEWn07Ow0lxb5Sc/nCy3WzUF1hnfs17VKfzGj:a/3ccDGxnNVlN8aCD0gM6j

Entry address:
0x212A78

Entry point:
E8, 56, 12, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, D0, 08, 64, 00, E8, 62, 17, 00, 00, E8, 23, 14, 00, 00, 0F, B7, F0, 6A, 02, E8, E9, 11, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, CA, 0B, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
1.3930

Code size:
2.1 MB (2,194,432 bytes)

The file hotspot-shield-4.15.1.exe has been seen being distributed by the following URL.

http://b.digallstateinfinity.info/hp/?q=jS8R3if/XLLaeurpnicUarFN8mFpXMkti4IklBYr iVhpG9joH81tY4MYpE0CrQ18JMEWToPSnJ0w7c2/Xu3D4J23yg39jlBYadkUIbSPUZHUfrmIGdqfsh/qvbDp2C9qBIC855Sl17YzkOfPDvk11Vo/WMrqbE0EGlWUHbfqW1tBs4 tgj1Wk9FN9pF8rM2zX/4UCZSL2A7B2ogx /i4ZFKxO5IoxTNBmzgdQnF5Nq22nDkqU2TJIemDkyzmzgKsUm5vP KBcZxw/BXGHPJhF3JiruFg4MrAwL5ESLuzudTzsbJ2YrnFz3xdJKrv9pnjRCN4g0/b8/oSU2giuX bSOGrmx/fk5KEFdGh91C9OOyRTNfMWhNNHFvv/K5EmutvatLF41RxK6BnppEB3mifd/heB2AFXmXAarBMuSvK/BKgmt5slu7RZcNnRZNQxIJLdjElSkJQz7TMYPgD8jd4Q9C6HSkkvLr6EEutXEd/uTg4VsKWoIbhMvTMYRoZpJw4wh8 Mrplm0pVEhQ/toSucFY7Nbv1dwS0XKxTrFYhODCnIjX6MoG9s1U9Z/7Wa5jxV27dmZFra8AONKT0GKxGcbZ706Ga0JG7GvEtE89 5cRLJFKVmAi82VJR5AeTNMVh hIthA9bDxKVbb FrKjL VOCVqirctswYjAfYoqYoj8P p0VubP5m 83 Yt2nx8hbj5DaNw5FoCtCcrnuSkwQLv8fLTx8Wr1PPfSv hJS46EfDC8Qf/.../H2prn0m6rlejXwAOOgRhiOdJo0G2BrCbPMdAKrwc5csZsTSlPHh9 a&external_id=1433102742650270997&uuid=a2kzjKDSPwtgItW8eYFEJFMp3PIEVLrhdKWqTD8Z5EY3EimYM3BQrCMc7rGX1gkACWy1Iuq74taQ2btRrY7REnWg7QO3eL5e1

Remove hotspot-shield-4.15.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.