Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
OpenSCManagerA, InitializeSecurityDescriptor, RegEnumKeyExA, RegOpenKeyExA, RegCloseKey, RegQueryValueExA, RegSetValueExA, RegQueryValueExW, RegCreateKeyExA, RegOpenKeyExW, SetSecurityDescriptorDacl, ControlService, OpenProcessToken, SetServiceStatus, QueryServiceStatus, ReportEventA, RegisterServiceCtrlHandlerExA, StartServiceA, DeregisterEventSource, CreateServiceA, ChangeServiceConfig2A, DeleteService, StartServiceCtrlDispatcherA, RegisterEventSourceA, CloseServiceHandle, OpenServiceA, AdjustTokenPrivileges, LookupPrivilegeValueA
iphlpapi.dll
GetIpForwardTable, GetAdaptersInfo, GetIpAddrTable
kernel32.dll
FindNextFileA, DeleteFileA, CreateThread, GetVolumeInformationA, OpenEventA, SetFilePointer, CompareFileTime, OpenProcess, GetCurrentProcess, WaitForSingleObject, CreateProcessA, TerminateProcess, GetStartupInfoA, GetStdHandle, ResetEvent, CopyFileA, SetFileAttributesA, FindClose, FlushFileBuffers, GetModuleHandleA, GetFileTime, GetSystemWindowsDirectoryA, FileTimeToSystemTime, GetProcessTimes, lstrlenA, FormatMessageA, SetConsoleCtrlHandler, GetModuleFileNameA, LocalFree, MoveFileExA, GetTempFileNameA, GetTempPathA, FindFirstFileA, CreateDirectoryA, TlsFree, TlsAlloc, EnterCriticalSection, GetLastError, InterlockedExchange, LeaveCriticalSection, SetEvent, HeapFree, CreateEventA, HeapAlloc, GetProcessHeap, InterlockedDecrement, InterlockedIncrement, GetVersionExA, ReadFile, WriteFile, GetFileSize, CreateFileA, CloseHandle, CreateToolhelp32Snapshot, Process32Next, GetSystemTimeAsFileTime, Process32First, LockResource, SizeofResource, WideCharToMultiByte, LoadResource, FindResourceW, FindResourceExW, LoadLibraryA, GetProcAddress, FreeLibrary, SetFileTime, Sleep, ResumeThread, ReleaseSemaphore, SetEnvironmentVariableA, CompareStringW, WriteConsoleW, SetEndOfFile, GetDriveTypeW, SetStdHandle, GetStringTypeW, GetCurrentProcessId, ExitThread, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetTimeZoneInformation, LCMapStringW, GetStartupInfoW, SetHandleCount, GetConsoleMode, GetConsoleCP, GetCurrentDirectoryW, GetModuleHandleW, CreateFileW, MultiByteToWideChar, DeleteFileW, GetVolumeInformationW, CreateDirectoryW, GetTickCount, GetVersionExW, FindFirstFileW, FindNextFileW, InitializeCriticalSection, DeleteCriticalSection, GetSystemDirectoryW, LoadLibraryW, RaiseException, InitializeCriticalSectionAndSpinCount, HeapDestroy, HeapReAlloc, HeapSize, FileTimeToLocalFileTime, GetDriveTypeA, FindFirstFileExA, DecodePointer, EncodePointer, ExitProcess, GetCommandLineA, HeapSetInformation, GetTimeFormatA, GetDateFormatA, RtlUnwind, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, IsProcessorFeaturePresent, HeapCreate, GetModuleFileNameW, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, TlsGetValue, TlsSetValue, SetLastError, GetCurrentThreadId, GetFullPathNameA, GetFileInformationByHandle, PeekNamedPipe, GetFileType
psapi.dll
GetModuleFileNameExA
shell32.dll
SHGetFolderPathA, SHGetFolderPathW
shlwapi.dll
PathFileExistsW, PathBuildRootA, PathAppendA, PathIsDirectoryW, PathIsRootA, PathAddBackslashA, PathFileExistsA, PathAddBackslashW, PathAppendW, PathIsRootW, PathIsDirectoryA
winmm.dll
mixerGetLineInfoW, mixerClose, mixerGetControlDetailsW, mixerOpen, mixerGetLineControlsW

openvpnas.exe

Hotspot Shield 2.93 by AnchorFree Inc (Signed)

Remove openvpnas.exe
Version:   2, 93, 0, 0
MD5:   8b4d1fdd3f31f2dd39b3c658a22208ee
SHA1:   999c6ddc55b4dfb9cac13fb90b17afd6675d8f22
SHA256:   703f58aaae7ac2e50c61792efa8262bbd700df910234b1a6d406c3b647c544b4

Overview

openvpnas.exe runs as a service under the name hshld (hshld) with extensive SYSTEM privileges (full administrator access). This is typically installed with the program Hotspot Shield 2.93 published by AnchorFree Inc and is most likely removed by most users once installed (53% removed). The file is digitally signed by AnchorFree Inc which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:openvpnas.exe
Publisher:AnchorFree Inc.
Product name:Hotspot Shield 2.93
Typical file path:C:\Program Files\hotspot shield\bin\openvpnas.exe
File version:2, 93, 0, 0
Size:557.29 KB (570,664 bytes)
Build date:4/26/2013 10:57 PM
Certificate
Issued to:AnchorFree Inc
Authority (CA):VeriSign
Effective date:Monday, March 28, 2011
Expiration date:Monday, April 14, 2014
Digital DNA
PE subsystem:Windows Console
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
AnchorFree Inc
  53% remove
The software is typically bundled with third party installers such as Open Candy. "Offer users the ability to browse the web anonymously to protect their privacy as well as gain access to region-restricted content portals like Hulu, Netflix and more. Note: This product may block advertisements on websites and/or the desktop."

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • hshld
  • 'hshld' (Hotspot Shield Service)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00233081%
0.028634%
Kernel CPU:0.00195354%
0.013761%
User CPU:0.00037727%
0.014873%
Kernel CPU time:1,612,427 ms/min
100,923,805ms/min
CPU cycles:60,382/sec
17,470,203/sec
Memory
Private memory:3.61 MB
21.59 MB
Private (maximum):5.77 MB
Private (minimum):1.33 MB
Non-paged memory:3.61 MB
21.59 MB
Virtual memory:58 MB
140.96 MB
Virtual memory (peak):62.04 MB
169.69 MB
Working set:2.82 MB
18.61 MB
Working set (peak):6.58 MB
37.95 MB
Page faults:55,583/min
2,039/min
I/O
I/O read transfer:388 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:17 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:394 Bytes/sec
448.09 KB/min
I/O other operations:24/sec
1,671/min
Resource allocations
Threads:4
12
Handles:129
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:"C:\Program Files\hotspot shield\bin\openvpnas.exe"
Owner:SYSTEM
Windows Service
Service name:hshld
Display name:hshld
Type:Win32OwnProcess, InteractiveProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
sechost.dll
Total CPU:0.01016152%
0.272967%
Kernel CPU:0.01016152%
0.107585%
User CPU:0.00000000%
0.165382%
CPU cycles:747,008/sec
5,741,424/sec
Context switches:1/sec
79/sec
Memory:100 KB
1.16 MB
openvpnas.exe (main module)
Total CPU:0.00079389%
Kernel CPU:0.00010554%
User CPU:0.00068835%
CPU cycles:56,459/sec
Memory:628 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 50.00%
Windows 8 Pro 33.33%
Windows 7 Home Premium 16.67%

Distribution by countryDistribution by country

Vietnam installs about 50.00% of Hotspot Shield 2.93.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 80.00%
Acer 20.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE