hsswd.exe
By AnchorFree Inc (Signed)
Warning 12 antivirus scanners has detected malware in various versions of hsswd.exe.
Overview
hsswd.exe has 27 known versions, the most recent one is . It is started as a Windows Service called 'ExpatWd' with the name 'ExpatWd'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 425.95 KB. It is an authenticode code-signed executable issued to AnchorFree Inc by the certification authority VeriSign. The programs Hotspot Shield 2.88, Hotspot Shield 2.61 and Hotspot Shield 2.84 have been observed as installing specific variations of hsswd.exe. During the process's lifecycle, the typical CPU resource utilization is about 0.0048% including both foreground and background operations, the average private memory consumption is about 2.84 MB with the maximum memory reaching around 4.97 MB. Addionally, typically read and write I/O disk operations is about 5.67 KB per minute for reads and 23 Bytes per minute for writes.
About hsswd.exe (from AnchorFree Inc)
“Hotspot Shield creates a virtual private network (VPN) between your laptop or iPhone and our Internet gateway. This impenetrable tunnel prevents snoopers, hackers, ISP‘s, from viewing your web browsin”
 Details
|
| File name: | hsswd.exe |
| Typical file path: | C:\Program Files\hotspot shield\bin\hsswd.exe |
| Certificate |
| Issued to: | AnchorFree Inc |
| Authority (CA): | VeriSign |
| Effective date: | Sunday, March 27, 2011 |
| Expiration date: | Sunday, April 13, 2014 |
| Windows Service |
| Service name: | ExpatWd |
| Display name: | ExpatWd |
| Type: | Win32OwnProcess |
Programs installed in
(Note, the programs listed below are for all versions of hsswd.exe.)
Hotspot Shield bundles a branded version of the Conduit Toolbar, which delivers search based advertising and results. During installation the user is presented in some cases with the option to install...
Expat Shield is a VPN program that allows users to access UK TV websites such as BBC iPlayer and ITV when outside of the UK. Expat Shield routes your IP address via a UK IP address as if you were stil...
Behaviors
(Note, the behaviors below are for all versions of hsswd.exe, select a unique version for details.)
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- ExpatWd
- 'ExpatWd' (Expat Shield Monitoring Service)
- 'HssWd' (Hotspot Shield Monitoring Service)
Malware detections
Based on 40+ industry antivirus scanners, 12 of them detected the following malware.
All file variations of hsswd.exe
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
38.31% |
|
| Windows 7 Home Premium |
21.43% |
|
| Microsoft Windows XP |
14.29% |
|
| Windows 8 Pro |
6.49% |
|
| Windows Vista Home Premium |
4.55% |
|
| Windows 7 Professional |
3.90% |
|
| Windows 7 Home Basic |
2.60% |
|
| Windows 8 Enterprise |
2.60% |
|
| Windows 7 Ultimate N |
1.95% |
|
| Windows 8 Pro with Media Center |
1.30% |
|
| Windows 8 Single Language |
0.65% |
|
| Windows 8 Enterprise N |
0.65% |
|
| Windows XP Professional |
0.65% |
|
| Windows 8 |
0.65% |
|
Distribution by country
United States installs about 20.69% of hsswd.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Toshiba |
24.19% |
|
| Dell |
19.35% |
|
| ASUS |
12.90% |
|
| Hewlett-Packard |
10.48% |
|
| Lenovo |
9.68% |
|
| Acer |
7.26% |
|
| Intel |
3.23% |
|
| Sony |
3.23% |
|
| MSI |
3.23% |
|
| GIGABYTE |
3.23% |
|
| American Megatrends |
1.61% |
|
| Gateway |
1.61% |
|
