Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

27cb5 3.45%
bef7d 31.03%
50794 6.90%
6c5b7 48.28%
4f6ba 3.45%
b7cfe 3.45%
6cd48 3.45%
(Note, AnchorFree Inc publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Child process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
ChangeServiceConfig2A, CloseServiceHandle, ControlService, CreateServiceA, DeleteService, DeregisterEventSource, InitializeSecurityDescriptor, OpenSCManagerA, OpenServiceA, QueryServiceStatus, RegCloseKey, RegEnumKeyExA, RegOpenKeyExA, RegQueryValueExA, RegisterEventSourceA, RegisterServiceCtrlHandlerExA, ReportEventA, SetSecurityDescriptorDacl, SetServiceStatus, StartServiceA, StartServiceCtrlDispatcherA, RegSetValueExA, RegQueryValueExW, RegCreateKeyExA, RegOpenKeyExW, RegCreateKeyExW, RegDeleteKeyW, RegDeleteValueW, RegEnumKeyExW, RegSetValueExW
iphlpapi.dll
GetAdaptersInfo, GetIpAddrTable, GetIpForwardTable
kernel32.dll
AddAtomA, CloseHandle, CompareFileTime, CopyFileA, CreateDirectoryA, CreateEventA, CreateFileA, CreateProcessA, CreateThread, CreateToolhelp32Snapshot, DeleteCriticalSection, DeleteFileA, EnterCriticalSection, ExitProcess, FileTimeToSystemTime, FindAtomA, FindClose, FindFirstFileA, FindNextFileA, FormatMessageA, FreeLibrary, GetAtomNameA, GetCurrentProcess, GetCurrentThreadId, GetFileSize, GetFileTime, GetLastError, GetModuleFileNameA, GetModuleHandleA, GetProcAddress, GetProcessTimes, GetStartupInfoA, GetStdHandle, GetSystemInfo, GetSystemTimeAsFileTime, GetTempFileNameA, GetTempPathA, GetTickCount, GetVersionExA, GetVolumeInformationA, InitializeCriticalSection, InterlockedExchange, LeaveCriticalSection, LoadLibraryA, LocalFree, MoveFileA, OpenEventA, OutputDebugStringA, OutputDebugStringW, Process32First, Process32Next, PulseEvent, ReadFile, ResetEvent, SetConsoleCtrlHandler, SetEvent, SetFilePointer, SetFileTime, SetLastError, SetUnhandledExceptionFilter, Sleep, WaitForSingleObject, WriteFile, lstrlenA, SetFileAttributesA, TlsFree, MoveFileExA, TlsAlloc, InterlockedDecrement, InterlockedIncrement, LockResource, SizeofResource, WideCharToMultiByte, LoadResource, FindResourceW, FindResourceExW, SetEnvironmentVariableA, CompareStringW, WriteConsoleW, SetEndOfFile, SetStdHandle, GetStringTypeW, LCMapStringW, GetTimeZoneInformation, GetCurrentProcessId, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetStartupInfoW, SetHandleCount, FlushFileBuffers, GetConsoleMode, GetConsoleCP, GetCurrentDirectoryW, GetFileType, PeekNamedPipe, GetModuleHandleW, CreateFileW, MultiByteToWideChar, DeleteFileW, GetVolumeInformationW, CreateDirectoryW, LoadLibraryW, GetVersionExW, FindFirstFileW, FindNextFileW, RaiseException, InitializeCriticalSectionAndSpinCount, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, FileTimeToLocalFileTime, GetDriveTypeA, FindFirstFileExA, DecodePointer, EncodePointer, GetCommandLineA, HeapSetInformation, GetTimeFormatA, GetDateFormatA, GetDriveTypeW, RtlUnwind, TerminateProcess, UnhandledExceptionFilter, IsDebuggerPresent, HeapCreate, GetModuleFileNameW, IsProcessorFeaturePresent, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, TlsGetValue, TlsSetValue, GetFullPathNameA, GetFileInformationByHandle, CopyFileW, IsDBCSLeadByteEx, VirtualProtect, VirtualQuery
libcurl.dll
curl_easy_cleanup, curl_easy_init, curl_easy_perform, curl_easy_setopt, curl_formadd, curl_formfree, curl_global_cleanup, curl_global_init, curl_slist_append, curl_slist_free_all
libeay32.dll
MD5_Final, MD5_Init, MD5_Update, SHA1_Final, SHA1_Init, SHA1_Update
msvcrt.dll
DllMain
shell32.dll
SHGetFolderPathA, SHGetFolderPathW
shlwapi.dll
PathAddBackslashW, PathIsDirectoryW, PathFileExistsW, PathIsRootW, PathAppendA, PathIsDirectoryA, PathIsRootA, PathFileExistsA, PathAppendW, PathBuildRootA, PathAddBackslashA
user32.dll
GetSystemMetrics
winmm.dll
mixerClose, mixerGetControlDetailsA, mixerGetLineControlsA, mixerGetLineInfoA, mixerOpen, mixerSetControlDetails, mixerGetLineInfoW, mixerGetControlDetailsW, mixerGetLineControlsW
ws2_32.dll
WSAGetLastError, WSAStartup, __WSAFDIsSet, accept, bind, closesocket, gethostname, htonl, htons, ioctlsocket, listen, ntohl, ntohs, recv, select, send, socket, WSACleanup

openvpnas.exe

By AnchorFree Inc (Signed)

Remove openvpnas.exe
MD5:   bef7d9760e0b00973e0f7efce68875c1
SHA1:   0273c2910329f414f6691876649cc0472e842444
SHA256:   d6428bac2eb2016e978e73038feeb35aa1e508869a9d9ff9d080d55f1697778d

What is openvpnas.exe?

OpenVPN is an open source software application that implements virtual private network (VPN) techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. It uses a custom security protocol. OpenVPN can be extended with third-party plug-ins or scripts which can be called at defined entry points.

About openvpnas.exe (from AnchorFree Inc)

OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a s

Overview

openvpnas.exe runs as a service under the name ExpatShieldService (ExpatShieldService) within the local user context. This is typically installed with the program Hotspot Shield 2.67 published by AnchorFree Inc and is most likely removed by most users once installed (64% removed). The file is digitally signed by AnchorFree Inc which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:openvpnas.exe
Typical file path:C:\Program Files\hotspot shield\bin\openvpnas.exe
Size:464.86 KB (476,016 bytes)
Certificate
Issued to:AnchorFree Inc
Authority (CA):VeriSign
Effective date:Sunday, March 27, 2011
Expiration date:Sunday, April 13, 2014
Digital DNA
PE subsystem:Windows Console
Entropy:6.573917
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
AnchorFree Inc
  64% remove
If you are using the free Service, AnchorFree may deliver third-party Advertisements within the content of any web page accessed. Advertisements may be injected into the top of the page, inserted directly into the page content, or even displayed to overlay the page. A “hotspot” is a Wi-Fi connection access point. Usually this type of connection is public; therefore, it is completely insecure. Hotspot Shield allows you to create a VPN, ...

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • ExpatShieldService
  • 'ExpatShieldService' (Expat Shield Service)
  • 'hshld' (Hotspot Shield Service)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00729861%
0.028634%
Kernel CPU:0.00504102%
0.013761%
User CPU:0.00225760%
0.014873%
Kernel CPU time:207,297 ms/min
100,923,805ms/min
Context switches:5/sec
284/sec
Memory
Private memory:6.48 MB
21.59 MB
Private (maximum):7.12 MB
Private (minimum):3.04 MB
Non-paged memory:6.48 MB
21.59 MB
Virtual memory:59.55 MB
140.96 MB
Virtual memory (peak):67.23 MB
169.69 MB
Working set:6.8 MB
18.61 MB
Working set (peak):9.32 MB
37.95 MB
Resource allocations
Threads:5
12
Handles:140
600
GUI GDI count:4
103

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:"C:\Program Files\hotspot shield\bin\openvpnas.exe"
Owner:User
Windows Service
Service name:ExpatShieldService
Display name:ExpatShieldService
Type:Win32OwnProcess, InteractiveProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
wow64.dll
Total CPU:1.47705809%
0.272967%
Kernel CPU:1.11472620%
0.107585%
User CPU:0.36233189%
0.165382%
CPU cycles:42,612,122/sec
5,741,424/sec
Context switches:17/sec
79/sec
Memory:252 KB
1.16 MB
ADVAPI32.dll
Total CPU:0.05766962%
Kernel CPU:0.03954488%
User CPU:0.01812474%
Context switches:6/sec
Memory:620 KB
openvpnas.exe (main module)
Total CPU:0.00044897%
Kernel CPU:0.00024508%
User CPU:0.00020389%
CPU cycles:7,766/sec
Memory:516 KB
ntdll.dll
Total CPU:0.00020391%
Kernel CPU:0.00020391%
User CPU:0.00000000%
CPU cycles:2,912/sec
Memory:1.66 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 27.59%
Windows 7 Home Premium 24.14%
Microsoft Windows XP 24.14%
Windows 8 Pro 6.90%
Windows 7 Professional 6.90%
Windows Vista Home Premium 6.90%
Windows XP Professional 3.45%

Distribution by countryDistribution by country

United States installs about 17.39% of openvpnas.exe.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
MSI 23.53%
Toshiba 23.53%
Acer 17.65%
Sony 11.76%
Hewlett-Packard 11.76%
GIGABYTE 11.76%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE