home

hotspotshield.exe

indirlivex Download Manager

This is a setup program which is used to install the application. The file has been seen being downloaded from depo.indirlivex.com.
Product:
indirlivex Download Manager

Version:
1.0.0.0

MD5:
ce3b504e7ae2e00c19ea2b4ca7f97a08

SHA-1:
d88c0e7ca64bf1de7695bfcd99e77d34245699e1

SHA-256:
301f6faf8234f7994aa5bdf92d8b1029096be36dc0d898f2ca6ba5fd2fa0997c

Scanner detections:
6 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/16/2024 2:53:34 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Kazy.363728
997

Bitdefender
Gen:Variant.Kazy.363728
1.0.20.670

Emsisoft Anti-Malware
Gen:Variant.Kazy.363728
8.14.05.14.07

F-Secure
Gen:Variant.Kazy.363728
11.2014-14-05_4

G Data
Gen:Variant.Kazy.363728
14.5.24

MicroWorld eScan
Gen:Variant.Kazy.363728
15.0.0.402

File size:
417 KB (427,008 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2013

Original file name:
indirlivex Download Manager.exe

File type:
Executable application (Win32 EXE)

Language:
Turkish (Turkey)

Common path:
C:\users\{user}\downloads\hotspotshield.exe

File PE Metadata
Compilation timestamp:
11/26/2013 6:38:31 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:ihvz6FzsbO6D1cZ7iN+5AI1UzupnIyQpnlx:i89E1cNeUAI1UipIyQpnlx

Entry address:
0x678AE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
406.5 KB (416,256 bytes)

The file hotspotshield.exe has been seen being distributed by the following URL.

http://depo.indirlivex.com/hotspotshield.exe

Scan hotspotshield.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.