openvpnas.exe
By AnchorFree Inc (Signed)
| Version:    | 2, 74, 0, 0 | 
| MD5:    | 917ad8239b7ffe908ff8f715a534d273 | 
| SHA1:    | e18655cec6c8c5aefa0c19c6e435d8a8aa342053 | 
| SHA256:    | 11dbc6d45b02f28ee402825499d3f76c8ef6ae456dc12fc61c96417f78eb1450 | 
Warning 4 antivirus scanners has detected malware.
What is openvpnas.exe?
Hotspot Shield allows you to create a VPN, or virtual private network, so you can transfer your data securely. When you access the Internet through such connections, you risk having your computer or mobile infected by a virus or even an intruder to enter your system. Moreover, the dangers exist that a malicious person can intercept your information and use it for unfriendly reasons. 
About openvpnas.exe (from AnchorFree Inc)
“Hotspot Shield creates a virtual private network (VPN) between your laptop or iPhone and our Internet gateway. This impenetrable tunnel prevents snoopers, hackers, ISP‘s, from viewing your web browsin”
Details
| File name: | openvpnas.exe | 
| Publisher: | AnchorFree Inc. | 
| Typical file path: | C:\Program Files\hotspot shield\bin\openvpnas.exe | 
| File version: | 2, 74, 0, 0 | 
| Size: | 511.36 KB (523,632 bytes) | 
| Certificate | 
| Issued to: | AnchorFree Inc | 
| Authority (CA): | VeriSign | 
| Effective date: | Monday, March 28, 2011 | 
| Expiration date: | Monday, April 14, 2014 | 
| Digital DNA | 
| File packed: | No | 
| .NET CLR: | No | 
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'hshld'  (Hotspot Shield Service)
 
- hshld
 
Malware detections
Based on 40+ industry antivirus scanners, 4 of them detected the following malware.
| Antivirus engine | Engine version | Detection | 
| Emsisoft Anti-Malware | 
3.0.0.569 | 
Gen:Variant.Graftor.48415 (B) | 
| NANO AntiVirus | 
0.22.8.50837 | 
Trojan.Win32.Siggen3.bbwlor | 
| The Hacker | 
None | 
Trojan/Agent.dmzl | 
| Trend Micro HouseCall | 
9.700.0.1001 | 
TROJ_GEN.F47V1019 | 
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
| CPU | 
| Total CPU: | 0.00546284% |  | 
| Kernel CPU: | 0.00443479% |  | 
| User CPU: | 0.00102805% |  | 
| Kernel CPU time: | 1,940 ms/min |  | 
| CPU cycles: | 50,605/sec |  | 
| Context switches: | 4/sec |  | 
| Memory | 
| Private memory: | 3.24 MB |  | 
| Private (maximum): | 4.78 MB |  | 
| Private (minimum): | 3.98 MB |  | 
| Non-paged memory: | 3.24 MB |  | 
| Virtual memory: | 55.54 MB |  | 
| Virtual memory (peak): | 60.86 MB |  | 
| Working set: | 4.58 MB |  | 
| Working set (peak): | 6.78 MB |  | 
| Page faults: | 41,052/min |  | 
| I/O | 
| I/O read transfer: | 144 Bytes/sec |  | 
| I/O read operations: | 1/sec |  | 
| I/O write transfer: | 12 Bytes/sec |  | 
| I/O write operations: | 1/sec |  | 
| I/O other transfer: | 178 Bytes/sec |  | 
| I/O other operations: | 15/sec |  | 
| Resource allocations | 
| Threads: | 4 |  | 
| Handles: | 112 |  | 
| GUI GDI count: | 4 |  | 
| GUI USER count: | 2 |  | 
 
Process properties
| Integrety level: | System | 
| Platform: | 32-bit | 
| Command line: | "C:\Program Files\hotspot shield\bin\openvpnas.exe" | 
| Owner: | SYSTEM | 
| Windows Service | 
| Service name: | hshld | 
| Display name: | Hotspot Shield Service | 
| Type: | Win32OwnProcess, InteractiveProcess | 
| Parent process: | services.exe (Services and Controller app by Microsoft) | 
Threads
Averages
 
| sechost.dll | 
| Total CPU: | 0.12470609% |  | 
| Kernel CPU: | 0.08566073% |  | 
| User CPU: | 0.03904536% |  | 
| CPU cycles: | 12,229,491/sec |  | 
| Context switches: | 7/sec |  | 
| Memory: | 100 KB |  | 
| ADVAPI32.dll | 
| Total CPU: | 0.00281293% |  | 
| Kernel CPU: | 0.00232794% |  | 
| User CPU: | 0.00048499% |  | 
| CPU cycles: | 150,739/sec |  | 
| Memory: | 792 KB |  | 
| openvpnas.exe (main module) | 
| Total CPU: | 0.00021173% |  | 
| Kernel CPU: | 0.00019556% |  | 
| User CPU: | 0.00001617% |  | 
| CPU cycles: | 3,768/sec |  | 
| Memory: | 568 KB |  | 
| ntdll.dll | 
| Total CPU: | 0.00000314% |  | 
| Kernel CPU: | 0.00000000% |  | 
| User CPU: | 0.00000314% |  | 
| CPU cycles: | 29/sec |  | 
| Memory: | 1.4 MB |  | 
 
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution | 
| Windows 7 Ultimate | 
39.73% | 
 | 
| Microsoft Windows XP | 
19.18% | 
 | 
| Windows 7 Home Premium | 
15.07% | 
 | 
| Windows Vista Home Premium | 
6.85% | 
 | 
| Windows 7 Professional | 
5.48% | 
 | 
| Windows 8 Enterprise | 
4.11% | 
 | 
| Windows 7 Ultimate N | 
4.11% | 
 | 
| Windows 8 Pro | 
2.74% | 
 | 
| Windows 7 Home Basic | 
1.37% | 
 | 
| Windows 8 | 
1.37% | 
 | 
Distribution by country
United States installs about 22.54% of openvpnas.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution | 
| Toshiba | 
37.50% | 
 | 
| Dell | 
25.00% | 
 | 
| ASUS | 
12.50% | 
 | 
| Hewlett-Packard | 
9.38% | 
 | 
| Lenovo | 
6.25% | 
 | 
| Gateway | 
6.25% | 
 | 
| Acer | 
3.13% | 
 |