hss-5.2.2-install-hss-805-ext.exe

Hotspot Shield

The application hss-5.2.2-install-hss-805-ext.exe has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from hotspot-shield.fr.softonic.com.
Product:
Hotspot Shield

Version:
5.2.2.9547

MD5:
03d5f3a1a72333b8676e3efb672e34f7

SHA-1:
fae5bb90da6bbe1f40030e968b652d499ffdbc7e

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/28/2024 8:31:51 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.HotspotShield.Installer.Meta (L)
16.7.4.22

File size:
13.1 MB (13,700,048 bytes)

Product version:
5.2.2.9547

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\documents and settings\aziz\mes documents\downloads\hss-5.2.2-install-hss-805-ext.exe

File PE Metadata
Compilation timestamp:
12/27/2015 7:25:41 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:Mv/GWFdn+CLGKWNgUI7JySHnlJ/Fe2mNf:/oVWRWHnrN+

Entry address:
0x327D

Entry point:
B1, 27, 8A, F0, 21, ED, FE, CF, 88, D3, C7, C0, 4B, 27, 03, E4, 0F, AF, D6, 52, 69, C9, 4D, 76, 2B, E5, F3, 0F, BE, EE, 0B, C5, 69, C8, 7B, FB, 72, 62, 8A, FC, F7, C7, 9A, EF, F6, F2, E8, 50, 00, 00, 00, 0C, 97, 0F, AF, C6, B3, 2C, 69, FA, FF, 6F, 2D, C7, 88, F1, 48, FF, C8, 20, D0, 8D, 2B, 0F, BF, FD, 87, C0, F7, C2, 8E, 09, 6D, 64, 48, BE, 7A, 2D, AE, 00, 8B, DD, 8D, 3D, 84, FD, 61, A7, 87, C6, 8D, 35, FC, CA, 94, C9, BD, CE, B5, A5, 37, F6, C7, 4E, 03, D3, 78, 0D, 25, A0, 29, A7, 6A, 81, E8, 54, AB, EE...
 
[+]

Code size:
24.5 KB (25,088 bytes)

The file hss-5.2.2-install-hss-805-ext.exe has been seen being distributed by the following URL.

Remove hss-5.2.2-install-hss-805-ext.exe - Powered by Reason Core Security