» MyHotspot.exe
Overview
Analysis
File Details
Behaviors (1)

MyHotspot.exe

Hotspot Server Software

Khalil Azzouzi

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘MyHotspot’.

File name:

MyHotspot.exe

Publisher:

Azzouzi Software (signed by Khalil Azzouzi)

Product:

Hotspot Server Software

Description:

Hotspot Software

Version:

13.0.0.0

MD5:

f509436fd45d61063f5a2e9bbe0e897a

SHA-1:

a0d8ae2c4a6812f40e3eecd69f55d5742fc9f038

SHA-256:

e9bb62ae1d026ac184998587099b8d46fa18f698a532ef4077402e0486e5101a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 9:16:10 PM UTC (today)

File size:

11.4 MB (11,961,600 bytes)

Product version:

13.0

Original file name:

MyHotspot.exe

File type:

Executable application (Win32 EXE)

Language:

German (Germany)

Common path:

C:\Program Files\myhotspot\myhotspot.exe

Digital Signature

Signed by:

Khalil Azzouzi

Authority:

GlobalSign nv-sa

Valid from:

9/19/2012 12:09:17 PM

Valid to:

9/20/2015 12:09:17 PM

Subject:

CN=Khalil Azzouzi, C=DE

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112143B4795DF5D1366AD8607B2770CC1649

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

196608:uSIWYF6IsUElYAqFnECEdRO6QRV1/skTdUl/NFNNMBw4iSULVcVc2N0XS6ir/lva:uS7YFgUkX

Entry address:

0x5E92D8

Entry point:

55, 8B, EC, 83, C4, EC, 53, 56, 57, 33, C0, 89, 45, EC, B8, F8, 80, 9E, 00, E8, A8, E0, A1, FF, 33, C0, 55, 68, 1A, 9A, 9E, 00, 64, FF, 30, 64, 89, 20, 33, C0, 55, 68, 9F, 99, 9E, 00, 64, FF, 30, 64, 89, 20, 68, 2C, 9A, 9E, 00, 6A, FF, 6A, 00, E8, 8E, E4, A1, FF, 8B, D8, 85, DB, 74, 0C, E8, 1B, E6, A1, FF, 3D, B7, 00, 00, 00, 75, 0D, 53, E8, 16, E4, A1, FF, E8, D9, B5, A1, FF, EB, 54, E8, EE, 9F, B1, FF, 84, C0, 75, 22, 6A, 00, 66, 8B, 0D, 54, 9A, 9E, 00, 33, D2, B8, 60, 9A, 9E, 00, E8, 31, 81, A5, FF, 53... 
[+]

Entropy:

6.6307

Developed / compiled with:

Microsoft Visual C++

Code size:

5.9 MB (6,196,224 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

MyHotspot

Command:

C:\Program Files\myhotspot 13.0\myhotspot.exe

Scan MyHotspot.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.