www.free-wifi-hotspot.com

HANG XUESONG

Domain Information

The domain www.free-wifi-hotspot.com registered by HANG XUESONG was initially registered in June of 2013 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the Linode network.
Remove Malware from www.free-wifi-hotspot.com - Powered by Reason Core Security
Registrar:
ENOM, INC.

Server location:
Texas, United States (US)

Create date:
Monday, June 24, 2013

Expires date:
Friday, June 24, 2016

Updated date:
Monday, May 25, 2015

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US

Scanner detections:
Detections  (82% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.TechEvolveGMBH.P, PUP.Optional.Installer.P, PUP.Optional.TechEvolveGMBH.P, PUP.Optional.TechEvolveGMBH.BB, Win32.Generic.TechEvolveGMBH.Installer.Meta
90.00%

ESET NOD32
Win32/OpenCandy, Win32/OpenCandy (variant), Win32/InstallCore.PY (variant), Win32/InstallCore.QL (variant), Win32/InstallCore.TC (variant)
80.00%

Malwarebytes
PUP.Optional.Amonetize, PUP.Optional.InstallCore
50.00%

VIPRE Antivirus
InstallCore
50.00%

Avira AntiVirus
ADWARE/InstallCore.Gen9, Adware/InstallCore.694088
50.00%

McAfee
Artemis!95FC8C815812, Artemis!F64BA8A4D830, Artemis!1CDF79A1C72C, Artemis!11766EEE82AC
40.00%

K7 Gateway Antivirus
Trojan , Unwanted-Program
40.00%

K7 AntiVirus
Trojan , Unwanted-Program
40.00%

Norman
InstallCore.CERT
40.00%

Sophos
Generic PUA HN, Generic PUA PB, Generic PUA JP, Generic PUA AA
40.00%

McAfee Web Gateway
Artemis
40.00%

Fortinet FortiGate
Adware/OpenCandy, Riskware/InstallCore
30.00%

F-Prot
W32/InstallCore.AC.gen
30.00%

Comodo Security
ApplicUnwnt
30.00%

Baidu Antivirus
Adware.Win32.InstallCore
30.00%

The domain www.free-wifi-hotspot.com has been seen to resolve to the following 2 IP addresses.

li918-213.members.linode.com
December 15, 2015

li166-221.members.linode.com
February 6, 2014

File downloads found at URLs served by www.free-wifi-hotspot.com.

1 / 68      (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (3d08861614f7f32a0f32bd6ee9132e0e)

16 / 68    (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (11766eee82ac947870432cfcc7f801d9)

14 / 68    (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (1cdf79a1c72c21f1c29cf569856e4b41)

15 / 68    (PUP)

15 / 68    (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (95fc8c8158124ddbf0f9bffef92e5d55)

14 / 68    (PUP)

14 / 68    (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (f64ba8a4d830c4cf9108da2fc5936896)

9 / 68      (PUP)

9 / 68      (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (icreinstall_freewifihotspot.exe)

1 / 68      (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (689512559902dbdf05fa9dbb93975d5c)

2 / 68      (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (51d946aaa2df340fe070573741e2dc68)

0 / 68
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (8c29defdb189c464218901de82a4908e)

2 / 68      (inconclusive)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (21521ce7afca6d29f3446222bb413718)

3 / 68      (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (864e25b551ffca5949f159590315fcb2)

The following file have been seen to comunicate with www.free-wifi-hotspot.com in live environments.

URL:
http://www.free-wifi-hotspot.com/

Google Analytics:
UA-42293897

Title:
“Free WiFi Hotspot - Free WiFi Hotspot Creator - Turn Laptop into a Wi-Fi Router”

Description:
“Free WiFi Hotspot lets you hare your computer's Internet connection with other devices by creating a secure wireless hotspot.”

Web server:
Apache/2.4.7 (PHP/5.5.9-1ubuntu4.14)

Facebook:
Likes:  8
Shares:  114
Comments:  3

Statistics are for the previous month.

Remove Malware from www.free-wifi-hotspot.com - Powered by Reason Core Security