» HssIE.DLL
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

HssIE.DLL

AnchorFree Inc

This is the downloadable installer to AnchorFree's Hotsopt Shield, an ad-supported VPN client that integrates with the browser. The free version injects ads in the web browser. The program is a setup application that uses the HotspotShield installer. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘Hotspot Shield Class’. This is installed with Hotspot Shield 2.67.

File name:

HssIE.DLL

Publisher:

AnchorFree Inc. (signed by AnchorFree Inc)

Version:

1, 0, 1, 1

MD5:

dd56e3271d8d63d655454b3f5c0f5c01

SHA-1:

e9202a26011bf8e67a7702bc70ba5c8457a363d1

SHA-256:

eeff4f2c3e3c3d5e7dbabcbb0d937a13b21cedd9a55cfaa4bc754cfade6ab276

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 6:17:54 PM UTC (today)

File size:

227.8 KB (233,288 bytes)

Product version:

1, 0, 1, 1

Original file name:

HssIE.DLL

File type:

Dynamic link library (Win32 DLL)

Installer:

HotspotShield

Language:

English (United States)

Common path:

C:\Program Files\hotspot shield\hssie\hssie.dll

Digital Signature

Signed by:

AnchorFree Inc

Authority:

VeriSign, Inc.

Valid from:

3/27/2011 5:00:00 PM

Valid to:

4/13/2014 4:59:59 PM

Subject:

CN=AnchorFree Inc, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=AnchorFree Inc, L=Sunnyvale, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

68A4A0CC448443C288A22A91D7F82126

Registration

CLSID:

{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}

ProgID:

HssIE.HssIEApp.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

6/14/2011 11:40:58 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

3072:BcBI2QVGv8vvjXSqQjxu5utX3fbvFO4JYkJscfs64Aapx+anT06QYhKL33Il52bp:qi2Uozq4ugv9s64AqXnT0BYgr3IeRHH

Entry address:

0x15A9F

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 81, A2, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, C3, B8, 7E, 08, 02, 10, A3, C0, 45, 03, 10, C7, 05, C4, 45, 03, 10, 65, FF, 01, 10, C7, 05, C8, 45, 03, 10, 19, FF, 01, 10, C7, 05, CC, 45, 03, 10, 52, FF, 01, 10, C7, 05, D0, 45, 03, 10, BB, FE, 01, 10, A3, D4, 45, 03, 10, C7, 05, D8, 45, 03, 10, F6, 07, 02, 10, C7, 05, DC, 45, 03, 10, D7, FE, 01, 10, C7, 05, E0, 45, 03, 10, 39, FE, 01, 10, C7, 05, E4, 45, 03, 10, C6... 
[+]

Entropy:

6.5839

Code size:

170 KB (174,080 bytes)

Internet Explorer BHO

CLSID:

{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}

CLSID name:

Hotspot Shield Class

The file HssIE.DLL has been discovered within the following program.

Hotspot Shield 2.67 by AnchorFree Inc

If you are using the free Service, AnchorFree may deliver third-party Advertisements within the content of any web page accessed. Advertisements may be injected into the top of the page, inserted directly into the page content, or even displayed to overlay the page.

www.hotspotshield.com

64% remove it

Scan HssIE.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.