home

hss-2.25-install-anchorfree-232-expatshield.exe

AnchorFree Inc

This is the downloadable installer to AnchorFree's Hotsopt Shield, an ad-supported VPN client that integrates with the browser. The free version injects ads in the web browser. The application hss-2.25-install-anchorfree-232-expatshield.exe by AnchorFree Inc has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the HotspotShield installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
AnchorFree Inc  (signed and verified)

MD5:
e28083629b874a4c4de5aff48838b2f7

SHA-1:
26596c16c3b4b62664c7042ba3f23d6c646ac730

SHA-256:
f3598f9ca606700860a5be146b7a888da0078b9b3e52086f1bf4f5b52a137dc8

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/6/2024 12:38:23 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.AnchorFree.Installer.Meta (L)
16.6.10.9

File size:
6.7 MB (6,990,832 bytes)

File type:
Executable application (Win32 EXE)

Installer:
HotspotShield

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\hss-2.25-install-anchorfree-232-expatshield.exe

Digital Signature
Signed by:
AnchorFree Inc

Authority:
VeriSign, Inc.

Valid from:
3/28/2011 1:00:00 AM

Valid to:
4/14/2014 12:59:59 AM

Subject:
CN=AnchorFree Inc, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=AnchorFree Inc, L=Sunnyvale, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
68A4A0CC448443C288A22A91D7F82126

File PE Metadata
Compilation timestamp:
9/9/2009 2:22:54 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:lEMOsqJqrVaVsPrWyJEPIi+MpySPHnlRE6hBy6EgtyO:lVOBJqUqyySwiXpySHnlNj

Entry address:
0x33FF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 70, 85, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, B8, EE, 7E, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, ED, 7E, 00, 8D, 44, 24, 38, 50, 55, 68, 6C, 85, 40, 00, FF, 15, 80, 81, 40, 00, 68, 54, 85, 40, 00, 68, C0, 6D, 7E, 00, E8, 35, 26, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, A0, F0, 83, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
25 KB (25,600 bytes)

The file hss-2.25-install-anchorfree-232-expatshield.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1463576127&Signature=C7celLEQfGfY7RA9RC~II9X0QUIVi0cSPCk4AoOL7u-rWWa94OaJX8oZXAGoM2ILwgbFAIEEXfibdH8OvBtn6Kp3XHcxIP2nnP8mh8AglleNnuogawfdVEep1aa1goAuTXrpu7rPjWTfzyfwaDoAGb0ZTrNuLYL7YliY~ZLkapE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1459216973&Signature=HkUD0yzt1WEsywW5ar7ahC8Wrs8cjM220GQZTkCax-T9mans-VOmf1zPp2FW48UYPoODe8sxtu12xAQS9~4JqlEgdEJ8~P9lWWe2ZfjmJV3NJtgIKjCW0OA8YnpDds54eSUQctRyJouYNULyfq9MrKrm4TD6N~3fG0QCyr1ZzIk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1457188443&Signature=CcIREm8dXN6vdYX~bshPNZXp4A2NqbQIkichexlJ0~nGOAIiatpnLZLgAeDdHbtMamnjpmZ~NUCUiq8Ajh1M2JgwykY0krSKf1R-FciwtePBTVtgwO5aWce3gkkvmZqDiqkTjxNsmaxKcEjdkPS7P1RbbcnKtnlsyFWIGmjo5WA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1482987374&Signature=DvMeeAh5N5XUXKrTBtODUe35zgM2UotYg68LOzcCIxhkLK9~zsINzxWz9TyZqkvnCEQZtl-sbA8ZA1h8-~bV4IWLRcnhM6BFTQy5DsMQ~sPAO4M2BmaPNQMEy6DAYePEO8-wNFzyAjIIe17Lv9xcgftE~wToGPvpfhV8zYqxJjw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_fr&type=PROGRAM&Expires=1477549180&Signature=irzQdnSe~LVuOotFGoPy1K9bCMHSo99AvRFdgqHK1esDEwF2pJFdWwEgvd1U6KFJEVeWaimPhlRdIvvuvRDQrnYa3yv4fOsS8u17q14TpNKOWfpXgmGfP1jJbHkSy~vXauN9OJHp8Ge~CqC1xiAiq-ZsDzMHNsJTiTVDuVjRY2E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://download880.mediafire.com/oa2day4ppykg/.../HSS-2.25-install-anchorfree-232-expatshield.exe

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1478028770&Signature=cUI1XJS26oVIxeVdNlwz1kwMbPjOO9BBVCuu0CWh36yYbGqgaoGoEP-YehILVFilTNX3EEaw4x6GdrmvyIMg5-7dakXNrYxU3C3jwsH9hcM1UTntL8H7varn3h83oisPVNuJ10nSdyRngJs2aIseKNZVeukCL3MDp3FrOghye8Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1478903755&Signature=BmekKvAlik~qJIwr0~-JXDSChr~K6I17ySP187kw1fLB7mT7-XLI0RKgkk2dfTjsfz4sm1hyfS-c5SZ49oUxZUonFS4DPXH5lzMaWif3xOsamrrqkA-pSL2gCWksm4dmSO1FG27GLI25vRMbjv5dPtqONuGF28KGbtGbH61ARy0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://68.68.107.109/download/.../HSS-232.exe

http://ar.softoware.net/get-expat-shield.html?ir=1

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1462634424&Signature=DDy1k9iRTW67U4H7y1feMcNFiZi2WnmaNF0QTw-Og8cjocuS99zoHOiIMK0x7IchkvIDP4bLa-2m5C4GyGranEKpxwZITJNwxlrXGrcbSuxcmZIK9NDzlKHDGX3W6Cbnmjg5A6G2Isxk8cjA0aLAiCntreuFFDZsZrr49Y5HVT4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1457516593&Signature=hpo6nE~J61sRZZ-86RR843OygYMp-3IqADQ4Ujd~sA24XxAgCQZIvEVO5cA0VoujB2Um3skyTC07EwhNxLdmp1Q7WdDVGLVDaNNxHb~gHtpvMnxJAWl-HCMPqi3jwjiEkdUxZXCdPI7n2Z6HMyYybVV7d9aqU4ldYG~wBXy~ADY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1478797472&Signature=gcoxH0aNes-DbJpb9RMGN5wJQz63Ovs618cGlpar4FmLL1umNl1Dns9fILxhvVgaluUiy6cvfpGN6Usf8odMc2T~~6pXdgsd84EDrVlLLE-2HXWYPCl-YRZh5fsZ9vQSbCDVHuTB-qp8e8ABlB2yhdeB8ViCL7zSMGpjXZ-chrQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1479279693&Signature=iGWANkG2593DZeSbUHkcMRAdZNmfOjegJ9rGP23O-v3AaA802mOFbaQMZpzLJITT1Hyhvjjog1iGzFtZ8FaiTSTinH5IXhQKthErjJmj74NPOvtQFPYdWnjsxPixR-MXds2vv3IS-7U1qnm4BitgMH79PunVgftulh4z2sOEzmM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1475492951&Signature=ApJsMjDk-B1XcPNGQcOOqcWZKPvmemkkmlxRc5HrKDbwqjYA4rDbUZOjhV9w7vkNlz8aVAKmsQrKZVF6K9LJCBP4xe9IBAO8BH0pu1u6eLZDsYhYBQEFrZheemxaOCmOsV46PSKl1FbYyVLM58sL5~cO5fTmt8bysa1BiR85L~U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://miodati.com/download/.../HSS-232 (1).exe

http://www.storekom.com/download/39187/.../get

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1467823042&Signature=eY1Xu-uTQMM~T18az2JNvEiOpcSDyput0zGnH9lA1jAFhdzMbC7xRHdyuVsLWLwL6OvFmj8n-ajmU8QTJVGh6CGB3JqQYVZ4y9KtNNwjmXS6hFnCuj8N4~wm3WPzoFXHZU0O5gFnfl2rf97kz4Iq6zWR~LZiGbrssL1oDywpDFs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1429909002&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=J8QUReCRfMN16taFNVpucfsOt5aLBzTi0MsDKuu35B42mePNHP1XIVJMHI89Gw2t9SbkKep6HzeHxcZXgwJqNd3i1ABdnm2L7neySeF2UNiLC3l-vmE3rwS7FN6X5~dqBfpg1eEvq95NDzKaX3vGSzuqY-33gHKH07n96~MKDuc_&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1476529498&Signature=MtmCVps21PN1X5vZ4lfgi7ttyPxVKkSdYqNKvsaz5bkEcUq~ZBsfeKqFHTnZFmXd8ZRyg3qNRTJ~W9uMmWJmD5C5Czhen4mRyP1Bsr0DGfwwmxAMDtI3~YeHG9ZBu19IGIVhQ89IdditJof7Ilpsy~nCAS1ceEAjEpoFA-O3rF8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1467713303&Signature=Kxd3mZsm3AS-8WGkNWCBmABdY66WoAn~CXddHTLF6zkX3yNi~zW3dMx9TCFYFu5ra5JvQu~tXDqgvePNhfBadCX4KFUyipJKNLvSJtG8oscJNdGVxTHHM~7r~Qfm66D9si-kmaZ75LksirfL93FhcL2sZshptxl2HROVa8JI2nw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://expat-shield.softonic.pl/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPgo8zx3t0l4C MWzKq6o2S08DKEvjtGkh9dqMoZPa1Seseh7XASoSO5a43xmaJKuJf2kiUTEXmxbmAPQvzSJ4VhGYRWBakvAoUPMc8IsTQY58nCdqo8cbPTOP3nWQ2pgsavmJ8v8Kid5D1hEa5dLjby1RIeQzoJOlNly43MgZBBg==

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1468609210&Signature=MyfamUpFjoNdtgykZWfCmVoT19x2t~A08sBBjFGqgU2MgGPI2cEyB~YcqqMuF2dL3L4hNF-idwLxShRQkY9Q4B3VbRWMwvsUgTUfhgODbLXQ8PAzg7bkERiYJCJnfTIsB2PTqOfVVyY-eqmtxm3Yv7LXA2lEph0ioJJ2P0vSOSs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://ultradownloads.com.br/.../2,1123064.html

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1473046450&Signature=BmkmrEoaAduphJ~3vYpc1MVq2TIk4-f64iErg1Kqnu~-KBIwfVS-jkM0RZSeEE-gY3bnCrEdh--pLNKZlTO7csQXLHdw4ILFMxsB1EthGD4hSZz0s6LnygporUkgv8XRjg~zVEEBPLwjEBv9xn1zvWzEAd6E46ExJp2YuhAbXx0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1429500114&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=TZlovmN3nsHXmhOtu4sWQssbrPU~aUkLf~1egq84avUU1g4uWtekEpsZBi1HKWqESlcygL49EAf-JZDwsaXv1tINK0U21R~otO9pew5Sfgb7Wa94lOjw9RY2A-tp~~fc1QNcuBHmAN2rCo3X2CO0ZGIIDD-YMtb53Sfl~bm41l8_&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1456586927&Signature=MPzYx64Qk46x71PF9zCztszSkUbQ~2eXGfNciTl5GPYbGbmD2w47XDOtYYJIqtqxbaPsDeTNttQIcmp0sa07RE6KDZ7WHcgfIJjhTYQ5d-hjixCdJAYrJbzi6VDzga4NJb71qLmNL-quprIBDGau-on-ibhYzetiHE6naFXs6MU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1468170531&Signature=FhJKby9F~4SEZNN7DjhVzX6iTyjw-9XDIXv7FEKYRTr5OjQwezJx1wxyUcf7Ntn9zixRCNVKmkTcZ11Bk806T6vadAQOxlcCBR~8i9H-tx2rGeA871DMK1qR44bki0LkPTyQF-kAvczHokn46vPe5pCLc7eb9kTNYT2RyvcCTxw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

http://download.findmysoft.com/2014/06/.../ExpatShield_2.25.exe

http://gsf-cf.softonic.com/265/96c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=331775&instance=softonic_en&type=PROGRAM&Expires=1440125799&Signature=ETrhFLRpe0wfXnXYwTU4G-DTyCq3XZg4uzptGLmmEKzZyKQ7EDXJqtr9ZPt9Zj5DGHKWosShoYIbhUKBLWDhpj9cVLDQO1c~LRyV7HGzgMzW~jVDNSI0KbuhT-FosvryptNi2SEIcXNrhItI2j0o3bwi9IZPO-0zTl5aqTTkwgw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HSS-2.25-install-anchorfree-232-expatshield.exe

Latest 30 of 79 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.