home

HSS-6.5.2-install-hss-815-ext.exe

Hotspot Shield 6.5.2

AnchorFree Inc

This is the downloadable installer to AnchorFree's Hotsopt Shield, an ad-supported VPN client that integrates with the browser. The free version injects ads in the web browser. The executable HSS-6.5.2-install-hss-815-ext.exe has been detected as malware by 3 anti-virus scanners. The program is a setup application that uses the HotspotShield installer. This is the uninstaller utility registered in the Windows Control Panel for the program Hotspot Shield 6.5.2 by AnchorFree Inc..
Publisher:
AnchorFree Inc.  (signed by AnchorFree Inc)

Product:
Hotspot Shield 6.5.2

Version:
6.5.2.10372

MD5:
060f28d77601ec80e251c98e4446ae60

SHA-1:
1ccdc6988e218ed400b50efae170aa3a315dd3cd

SHA-256:
743cad88113450312ad4a2efab4b83e66f99fe9173bc20f13b4a51906e597a75

Scanner detections:
3 / 68

Status:
Malware

Analysis date:
11/5/2024 11:45:58 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Floxif.H virus
6.3.12010.0

F-Prot
W32/Floxif.B
4.6.5.141

F-Secure
Win32.Floxif.A
5.16.24

File size:
1.2 MB (1,261,871 bytes)

Product version:
6.5.2.10372

Copyright:
© AnchorFree Inc. All rights reserved.

Original file name:
HSS-6.5.2-install-hss-815-ext.exe

File type:
Executable application (Win32 EXE)

Installer:
HotspotShield

Language:
English (United States)

Common path:
C:\ProgramData\package cache\{9da63c8f-f48e-4a1e-88b8-86b38d5e8474}\hss-6.5.2-install-hss-815-ext.exe

Digital Signature
Signed by:
AnchorFree Inc

Authority:
VeriSign, Inc.

Valid from:
4/20/2016 6:00:00 AM

Valid to:
7/19/2017 5:59:59 AM

Subject:
CN=AnchorFree Inc, O=AnchorFree Inc, L=Menlo Park, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2C55C805B14E57423E47788CF4B66377

File PE Metadata
Compilation timestamp:
9/3/2015 9:51:16 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

Entry address:
0x2A809

Entry point:
E9, 1B, 27, 01, 00, E9, 80, FE, FF, FF, 3B, 0D, 04, 90, 46, 00, F2, 75, 02, F2, C3, F2, E9, 1F, 07, 00, 00, 55, 8B, EC, EB, 1F, FF, 75, 08, E8, AD, 6C, 00, 00, 59, 85, C0, 75, 12, 83, 7D, 08, FF, 75, 07, E8, F6, 08, 00, 00, EB, 05, E8, D2, 08, 00, 00, FF, 75, 08, E8, 24, 6D, 00, 00, 59, 85, C0, 74, D4, 5D, C3, 55, 8B, EC, FF, 75, 08, E8, FF, 08, 00, 00, 59, 5D, C3, 55, 8B, EC, F6, 45, 08, 01, 56, 8B, F1, C7, 06, 98, F3, 45, 00, 74, 0A, 6A, 0C, 56, E8, D8, FF, FF, FF, 59, 59, 8B, C6, 5E, 5D, C2, 04, 00, CC...
 
[+]

Entropy:
7.5778

Packer / compiler:
Xtreme-Protector v1.05

Code size:
291.5 KB (298,496 bytes)

Program Uninstaller
Program name:
Hotspot Shield 6.5.2

Display publisher:
AnchorFree Inc.

Display version:
6.5.2.10372

Uninstall string:
"C:\ProgramData\Package Cache\{9da63c8f-f48e-4a1e-88b8-86b38d5e8474}\HSS-6.5.2-install-hss-815-ext.exe" /uninstall


Remove HSS-6.5.2-install-hss-815-ext.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.