The application halo-screensaver-1-0-es-en-fr-de-win.exe has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts. While running, it connects to the Internet address static.5-9-51-208.clients.your-server.de on port 80 using the HTTP protocol.