» hss-5.4.1-install-plain-701-plain.exe
Overview
Analysis
File Details
Downloads (25)

hss-5.4.1-install-plain-701-plain.exe

Hotspot Shield

AnchorFree Inc

This is the downloadable installer to AnchorFree's Hotsopt Shield, an ad-supported VPN client that integrates with the browser. The free version injects ads in the web browser. The application hss-5.4.1-install-plain-701-plain.exe by AnchorFree Inc has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the HotspotShield installer. The file has been seen being downloaded from fs41.filehippo.com and multiple other hosts.

File name:

Publisher:

AnchorFree Inc (signed and verified)

Product:

Hotspot Shield

Version:

5.4.1.9699

MD5:

df98791c96d1c24a17894fb1f3a465c1

SHA-1:

d93476f2391470067b0591394540da6f8ac8244b

SHA-256:

cb4f7ae89883ee9a4242338658ebf6df921b4d8682896eb03cc26974ccfe9f0e

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/30/2024 9:11:07 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.AnchorFree.Installer.Meta (L)

16.6.10.9

File size:

11.6 MB (12,190,848 bytes)

Product version:

5.4.1.9699

File type:

Executable application (Win32 EXE)

Installer:

HotspotShield

Language:

English (United States)

Common path:

C:\users\{user}\downloads\programs\hss-5.4.1-install-plain-701-plain.exe

Digital Signature

Signed by:

AnchorFree Inc

Authority:

VeriSign, Inc.

Valid from:

5/21/2015 5:00:00 AM

Valid to:

6/14/2016 4:59:59 AM

Subject:

CN=AnchorFree Inc, O=AnchorFree Inc, L=Menlo Park, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3DAA06F4E8BE7B2AE8FC57BA8578B7D9

File PE Metadata

Compilation timestamp:

12/27/2015 11:25:41 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

196608:nBzWDxXVmRWQsZ38GDO9i/l6uySPHnlNV7dj6fI8UWxBO4cx/FNerrVavo:BzAxEcpD7/l5ySHnln5JvWxBO4Y9urVT

Entry address:

0x327D

Entry point:

81, EC, D4, 02, 00, 00, 55, 56, 6A, 20, 33, ED, 5E, 89, 6C, 24, 0C, 68, 01, 80, 00, 00, C7, 44, 24, 0C, 00, A3, 40, 00, 89, 6C, 24, 18, FF, 15, B0, 80, 40, 00, FF, 15, AC, 80, 40, 00, 66, 3D, 06, 00, 74, 11, 55, E8, 51, 31, 00, 00, 3B, C5, 74, 07, 68, 00, 0C, 00, 00, FF, D0, 53, 57, 68, F4, A2, 40, 00, E8, CE, 30, 00, 00, 68, EC, A2, 40, 00, E8, C4, 30, 00, 00, 68, E0, A2, 40, 00, E8, BA, 30, 00, 00, 6A, 09, E8, 1F, 31, 00, 00, 6A, 07, E8, 18, 31, 00, 00, A3, 44, 8A, 7A, 00, FF, 15, 44, 80, 40, 00, 55, FF... 
[+]

Entropy:

7.9955 (probably packed)

Code size:

24.5 KB (25,088 bytes)

The file hss-5.4.1-install-plain-701-plain.exe has been seen being distributed by the following 25 URLs.

http://fs41.filehippo.com/1830/.../HSS-701.exe

http://www.appsheartdelivery.com/WVl6OTRQVmQyUVhwUFIyeG5la0Z4VFZSSmVFSnNObEoyY1dabFZUSkpNMHA2TTBzeVVGZENiR1JFYVhKVldFVWxNMFFtWXowd1F6bGtNMHBKVEZrMU9HNURUMUppZEZwRGIyTkRNbkJOV1RoTk5FOUxhVGhDVDA0bE1rSnlVRXBwZERoeVQxcHlSMDlWT1dwVE9XUkRNRUl4YjJORUpUSkNKVEpHV0UxMVRFNHpibG80UmxCQlZtZHpkMEoxUTFOTWQxWXdNMWhvUTNGaGRERTVhalJHYmxsdlRVcFdTWFpCWkUxR1pFeHRSbVJKWXlVeVFqUkVlbEJRWW1KRWIybEdTMUIwVVRCV1NtZzJWbHBJWkdKdVQwRWxNa1puSlRORUpUTkVKbVU5TUNaa2IzZHViRzloWkVGelBXaHZkSE53YjNRdGMyaHBaV3hrTFRVdU5DNHhMbVY0WlNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVelFTVXlSaVV5Um0xNVpHRjBhUzVqYjIwbE1rWWxNa1prYjNkdWJHOWhaQ1V5Um1oemN5MTNhVzR5SlRKR1NGTlRMVGN3TVM1bGVHVT0=

http://filehippo.com/download/file/.../

http://www.grabupdateshare.com/TbxNWJ9OvotwVlP2aPU1QVGh HqiX0yh6MMqqfNdcvd_2XBiTaISe6UHzJ185nbVMhflttedIzx6shRmcX4jZRihykPxupQ_ycGwsSThcwqq1mowndH1RoF1fH59jIMQGWafGuo4rxSjEPNr38E5eXrLc5X fZ84fKbepbZ9NTnBmsseJfVBOFBiRtSAXCvjV6H5045EVrrGZZtFN45b7hyLfzcZDa2Cm9uczMYfOZ1DwOUpivtxAtBFCbdEIst_5y07eZGh8p1_0sdPQ4J MXsq6JzSc3d7GG6FM9jEpYsNX0N4LHRb3 buqOY8dj0VeozbrJXlBP56wsrg5j6OHCHNNwSwqwWfuTeJlMJrQacehBJFhaYZsefaYHmW20HHjG cu 0K6wa1 WYeaJ85k5TosPbLjnELgQAx uDFSwMbzz6fae8SvEB3LnYgG3SNyYUniMzVFMDFQQVJFhd3Wjbsfvl6S34sfIOq EnrPapsPnjECJOcwqHjFOrNhlzW96Na8a6cvvlpvyoutmr3E7lhKvJWe7z9 dqH6NwUDVkNxSHxVILG8C1aim_rcd07sKZdNTRHTjUkRRqnpVnncw5cXRe_D1cGZWbBGI12HCH cP2kwrXL7RL dNfMZamzSKbcbEhan3lwobvVWSd0cQdrhPVNLskoPEaDLGaFH4gCpmKNOgDqf4qf4G22GoOfBM6UfyBUWb5MVhw7069kuRRW28mAqq88Ov4uhi6y apj81sQkuUijQ2phHWCbvRvRShUJd8W-GzQAAMTmRjHByfAL0U6oENT4bMJEDhxaIIkezJ6bB3pjRPHqe3fud0y_e6CrQnLVgmFGLQnHDw==-e

http://filehippo.com/download/file/.../

https://www.filecoffee.com/download/.../3560

http://www.storekom.com/download/39296/.../get

http://www.towertowncity.com/c?x=yAr118nJNy0VJ0B3qABc8eGsB10pTw4XLp3qerF4gSg=&c=75wTl6SHwY/LTGlfbv0ctUDFdqYy1C8CdvNHopFl5w XlhzGqqMFVX24dkTI/5PMRXazipuuVW04sct7gbr0R8Lx/w4Mz3xX3clkwiTmneFg7ieCskBXlI8OyyirftSX0OHwPIfVpdME/hiJjVsSZA==&e=0&downloadAs=hotspot-shield-5.4.1.exe&fallback_url=http://mydati.com//download/.../HSS-701.exe

http://filehippo.com/download/file/.../

http://www.stockclearhead.com/c?x=g1/Fg662lw6VkqpP4flrR2psgcZDi 5h03BtL5KMvAs=&c=RGXZ2ulrNHY7l8jln8RT7NTmOuZXbFEql81tm9cCh9Gqa pFbSnCLKufDC1yA 0dbO0ClcnTYoI3dKaeMh4/xfUnIB1qzlqIwGu1E7jeVaonxnhTHWgSVwX65wCxB/bWXFseK14cxp NnxLyvB1VhQ==&e=0&downloadAs=hotspot-shield-5.4.1.exe&fallback_url=http://mydati.com//download/.../HSS-701.exe

http://filehippo.com/download/file/.../

http://mydati.com//download/.../HSS-701.exe

http://dl1.filehippo.com/.../HSS-701.exe

http://www.heartcontenttowers.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

http://www.hostingtowerscenter.com/c?x=T 7VpjR1J96uAixPxL0Znbqrja9nPbr88DdmztlOXjI=&c=3HR8nQ8AqEC6Aa1MqOrRMLhUh8lyVgKhJ7h/gXJGYB8tmGWngAAMBIs 6NHY6DLfUefPnFmimh0WxAO3qUKCiPmaxKGWwP5JLosUpqsJTLbXVjVQ BByEmw/se5vmoR2KNUJhd1vRg1iehyJib9Jcw==&e=0&downloadAs=hotspot-shield-5.4.1.exe&fallback_url=http://mydati.com//download/.../HSS-701.exe

http://www.stockclearhead.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

http://www.stockclearhead.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

http://www.towngiftquick.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

http://www.stockclearhead.com/c?x=YQzMC OOmJNq8i3iZMihI735TAFWm0MYBkwdwRY7j8c=&c=ZGcxs8R9uPP6Kx0QID IQA7WNOgHtfBo1BxaEBF4p06Zftp8Cd0ENblLoDwjheSxspsoEZwwPcqNH0essUjWI5kn 87P1kQYHoc1agpSW7czRGjWPdS3F0OqVkx ajOUwvYMc RQ8ZgyzSCX3I5 Ut9wAht NrjtDmKWJjS6IcxQVGXh6Qx8TyraWpYtt1Ds&e=0&downloadAs=hotspot-shield-5.4.1.exe&fallback_url=http://mydati.com//download/.../HSS-701.exe

http://www.towngiftquick.com/WVl6OTRQVEIxVDFwaFRraE1VVzlUY0ZSdGNUVmFSR0pLT0ZwVldHZDRPSFJrV2t0V2VsWmxWaVV5UW5JMGVVWnZOQ1V6UkNaalBWaEJSRzFVY1V3NU16TkxXVmN5VDA5R1IzUkVRM0F6VWtWelVtaFNVbGxGTUZrbE1rSlFPRXh3YlRnd2VqTkhkbTVvUzFkdFYzSnNjRkJaWjBvM1JtUkRNbmhGU0RCUlJYVmpkM2xQZERBMWVWVWxNa0k1YWxSTGMya3hObk4yU0VSUGNrOURKVEpHTWtSTFUydEZiRVZGWmxWU2MySXlUemxQT0U1UFpFYzNOeVV5UWpFMmVGZFdWWE5sT0RSVlVrbHBXV3dsTWtKVVdIVWxNa0pHYW1WWFp5VXpSQ1V6UkNabFBUQW1aRzkzYm14dllXUkJjejFvYjNSemNHOTBMWE5vYVdWc1pDMDFMalF1TVM1bGVHVW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMEVsTWtZbE1rWnRlV1JoZEdrdVkyOXRKVEpHSlRKR1pHOTNibXh2WVdRbE1rWm9jM010ZDJsdU1pVXlSa2hUVXkwM01ERXVaWGhs

http://www.bundleuniversenew.com/c?x=jT8/O54nJODDt6K6dZEz97gVtxaE7dpRTr3i S9N5s4=&c=yXed5EEsyVf24ENm8ttz3wxTD5OQaZRaQnq1mXAOf3Ei VpKTKMUXg5LQTyfYzFNI vyp1PYqrfB1euJ I9SrpnLUC3kK7hmTOfC2XhXdv7njD C606IjX6B1d9VMIUHBbZ9RrJQqr6WJosMb5dGmA==&e=0&downloadAs=hotspot-shield-5.4.1.exe&fallback_url=http://mydati.com//download/.../HSS-701.exe

Remove hss-5.4.1-install-plain-701-plain.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.