» Stidia.VpnShield.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

Stidia.VpnShield.exe

VPN Shield

STIDIA S.A.

It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in. This file is installed with the program VPN Shield.

File name:

Publisher:

STIDIA S.A. (signed and verified)

Product:

VPN Shield

Description:

STIDIA s.a. (VPN Shield)

Version:

1.6.0

MD5:

8bf4f21c51230440040663abd65c1404

SHA-1:

3cb09aa08af368341e752a1541bc5310d3e7ae9b

SHA-256:

e24828ba75f172a0cd3246192906c31a1eae53d2c14bfd34f8718df42e2e1edf

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

5/4/2024 7:56:50 PM UTC (today)

Scan engine

Detection

Engine version

Bkav FE

W32.HfsAdware

1.3.0.6379

File size:

980.3 KB (1,003,784 bytes)

Product version:

1.6.0

Original file name:

Stidia.VpnShield.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\stidia s.a\vpn shield\stidia.vpnshield.exe

Digital Signature

Signed by:

STIDIA S.A.

Authority:

VeriSign, Inc.

Valid from:

9/28/2014 5:00:00 PM

Valid to:

10/29/2015 4:59:59 PM

Subject:

CN=STIDIA S.A., O=STIDIA S.A., L=Senningerberg, S=Luxembourg, C=LU

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4045A3024A8CCBCD4929B1510330C5EF

File PE Metadata

Compilation timestamp:

11/19/2014 1:38:02 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

12288:hQgdNSPNTVNOTrVNOT3mllFxEFJCeqhNmZeR:NSilsPCeqhNmZeR

Entry address:

0xE3EFE

Entry point:

FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Entropy:

5.1486

Developed / compiled with:

Microsoft Visual C# / Basic .NET

Code size:

904 KB (925,696 bytes)

Scheduled Task

Task name:

STIDIA - VPN Shield

Trigger:

Logon (Runs on logon)

Description:

Launch VPN Shield at log on.

The file Stidia.VpnShield.exe has been discovered within the following program.

VPN Shield by STIDIA S.A.

22% remove it

Scan Stidia.VpnShield.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.