If the connection to the command server has not been established, then the virus uses a fixed key (so-called ‘offline key’). If this succeeds, the virus sends data on the infected computer to the server, and from it receives a key (so-called ‘online key’) necessary for file encryption. After that, Hgsh virus tries to connect to its command server.

Upon execution, Hgsh virus creates a directory in the Windows system directory, copies itself to this directory, changes some OS settings, and also collects information about the infected computer. Typically, ransomware like Hgsh can infect a computer when installing programs downloaded from torrent web-sites as well as when running cracked games, freeware, key generators and other similar software. This virus sneaks into the system without any visible symptoms, which is why users notice that their computer is infected too late, when the files are already encrypted. Hgsh ransomware is a malware that is created with the intent to encrypt files located on the victim’s computer, and then extort money to decrypt them. Screenshot of files encrypted by Hgsh virus (‘.hgsh’ file extension) QUICK LINKS

Wpe pro free download no virus rar