Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
OpenServiceW, StartServiceCtrlDispatcherW, RegQueryValueExW, RegCloseKey, ChangeServiceConfig2W, RegisterServiceCtrlHandlerW, DeleteService, ControlService, QueryServiceStatus, StartServiceW, RegOpenKeyExW, RegCreateKeyW, CloseServiceHandle, CreateServiceW, OpenSCManagerW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, SetServiceStatus, RegSetValueExW, RegOpenKeyExA, RegEnumKeyExA
iphlpapi.dll
GetAdaptersInfo
kernel32.dll
IsValidLocale, EnumSystemLocalesA, GetLocaleInfoA, GetUserDefaultLCID, InterlockedExchange, FindFirstFileW, FileTimeToSystemTime, CompareFileTime, FindNextFileW, FindClose, GlobalAlloc, GlobalFree, MultiByteToWideChar, lstrlenW, CompareStringW, LockResource, SizeofResource, FindResourceW, FindResourceExW, GetModuleFileNameW, WideCharToMultiByte, GetLastError, GetProcAddress, CloseHandle, GetModuleHandleW, DeleteFileW, CreateThread, WaitForSingleObject, GetCurrentProcess, GetVersionExW, GetSystemWindowsDirectoryW, CreateProcessW, Sleep, CreateDirectoryW, SetConsoleCtrlHandler, OpenEventW, GetCurrentDirectoryW, GetFileType, SetEnvironmentVariableA, ExitProcess, GetStdHandle, FreeEnvironmentStringsW, GetEnvironmentStringsW, PeekNamedPipe, GetFileInformationByHandle, GetFullPathNameW, LCMapStringW, HeapCreate, GetConsoleMode, GetConsoleCP, GetStringTypeW, LoadResource, InitializeCriticalSection, SetEndOfFile, WriteConsoleW, FlushFileBuffers, SetStdHandle, FatalAppExitA, GetLocaleInfoW, GetFullPathNameA, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, CreateProcessA, GetVolumeInformationW, CreateFileA, GetFileSize, SetFilePointer, WriteFile, ReadFile, CreateFileW, FreeLibrary, GetSystemDirectoryW, LoadLibraryW, GetStartupInfoW, GetCurrentThreadId, CreateEventW, PostQueuedCompletionStatus, SetEvent, TerminateThread, CreateIoCompletionPort, GetQueuedCompletionStatus, GetCurrentThread, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, WaitForMultipleObjects, ResetEvent, DeviceIoControl, FindCloseChangeNotification, FindNextChangeNotification, FindFirstChangeNotificationW, SetCurrentDirectoryW, CreateMutexW, ReleaseMutex, OpenMutexW, RaiseException, InitializeCriticalSectionAndSpinCount, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, GetSystemTimeAsFileTime, FileTimeToLocalFileTime, GetDriveTypeW, FindFirstFileExW, EncodePointer, DecodePointer, GetCommandLineW, HeapSetInformation, GetTimeFormatA, GetDateFormatA, GetDriveTypeA, FindFirstFileExA, ExitThread, ResumeThread, RtlUnwind, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, IsProcessorFeaturePresent, GetTimeZoneInformation, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, SetLastError, SetHandleCount
ole32.dll
StringFromGUID2
shell32.dll
SHGetFolderPathA, SHGetFolderPathW
shlwapi.dll
PathAppendW, PathAddBackslashW, PathIsDirectoryW, PathIsRootW, PathFileExistsW
user32.dll
wsprintfW
version.dll
VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW
wininet.dll
InternetConnectW, InternetCloseHandle, HttpOpenRequestW, InternetSetOptionW, InternetQueryDataAvailable, HttpQueryInfoW, InternetOpenUrlW, InternetCheckConnectionW, InternetAttemptConnect, InternetOpenW, InternetCrackUrlW, HttpSendRequestW, InternetReadFile
ws2_32.dll
freeaddrinfo, WSACreateEvent, WSAEventSelect, WSAIoctl, WSAEnumNetworkEvents, getaddrinfo

hsssrv.exe

Hotspot Shield 2.93 by AnchorFree Inc (Signed)

Remove hsssrv.exe
Version:   2, 93, 0, 0
MD5:   fda5e88be1333b69bed57aadaa16991f
SHA1:   e70c98024a5dc44c047801911c15723fb7e6f411
SHA256:   74c0093c7c56bffd202261b0fd0c98b21def0276d8e1cff9fe219e7df2f1d8af

Overview

hsssrv.exe runs as a service under the name Hotspot Shield Routing Service (HssSrv) with extensive SYSTEM privileges (full administrator access). This is typically installed with the program Hotspot Shield 2.93 published by AnchorFree Inc and is most likely removed by most users once installed (53% removed). The file is digitally signed by AnchorFree Inc which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:hsssrv.exe
Publisher:AnchorFree Inc.
Product name:Hotspot Shield 2.93
Typical file path:C:\Program Files\hotspot shield\hsswpr\hsssrv.exe
File version:2, 93, 0, 0
Size:452.79 KB (463,656 bytes)
Build date:4/26/2013 10:56 PM
Certificate
Issued to:AnchorFree Inc
Authority (CA):VeriSign
Effective date:Monday, March 28, 2011
Expiration date:Monday, April 14, 2014
Digital DNA
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
AnchorFree Inc
  53% remove
The software is typically bundled with third party installers such as Open Candy. "Offer users the ability to browse the web anonymously to protect their privacy as well as gain access to region-restricted content portals like Hulu, Netflix and more. Note: This product may block advertisements on websites and/or the desktop."

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'HssSrv' (Hotspot Shield Routing Service)
  • HssSrv
Network connections
  • [TCP] 68.68.107.160:80
  • [UDP] listens on port 1900

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00109940%
    0.028634%
    Kernel CPU:0.00077759%
    0.013761%
    User CPU:0.00032181%
    0.014873%
    Kernel CPU time:6,760,627 ms/min
    100,923,805ms/min
    CPU cycles:828,792/sec
    17,470,203/sec
    Context switches:32/sec
    284/sec
    Memory
    Private memory:2.82 MB
    21.59 MB
    Private (maximum):6.35 MB
    Private (minimum):4.02 MB
    Non-paged memory:2.82 MB
    21.59 MB
    Virtual memory:58.79 MB
    140.96 MB
    Virtual memory (peak):68.68 MB
    169.69 MB
    Working set:4.91 MB
    18.61 MB
    Working set (peak):8.12 MB
    37.95 MB
    Page faults:13,270/min
    2,039/min
    I/O
    I/O read transfer:176 Bytes/sec
    1.02 MB/min
    I/O read operations:1/sec
    343/min
    I/O other transfer:641 Bytes/sec
    448.09 KB/min
    I/O other operations:34/sec
    1,671/min
    Resource allocations
    Threads:7
    12
    Handles:202
    600

    BehaviorsProcess properties

    Integrety level:System
    Platform:64-bit
    Command line:"C:\Program Files\hotspot shield\hsswpr\hsssrv.exe"
    Owner:SYSTEM
    Windows Service
    Service name:HssSrv
    Display name:Hotspot Shield Routing Service
    Type:Win32OwnProcess
    Parent process:services.exe (by Microsoft)

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Ultimate 57.14%
    Windows 8 Pro 28.57%
    Windows 7 Home Premium 14.29%

    Distribution by countryDistribution by country

    Vietnam installs about 57.14% of Hotspot Shield 2.93.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    ASUS 66.67%
    Acer 33.33%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE