home

wifihotspot.exe

Wifi HotSpot

Gear Box Computers®

The application wifihotspot.exe, “Wifi HotSpot Setup ” has been detected as a potentially unwanted program by 6 anti-malware scanners. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars.
Publisher:
Gear Box Computers®

Product:
Wifi HotSpot

Description:
Wifi HotSpot Setup

Version:
1.0

MD5:
53f3059c4bc456d36379062d057909a4

SHA-1:
88ef194809188237271f60c984cef714c50e58fd

SHA-256:
6bd0b03abd9a43ee4d157973b2de578b32feebc03c2f4cab02caf644adb69824

Scanner detections:
6 / 68

Status:
Potentially unwanted

Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:
4/26/2024 6:00:32 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
OpenCandy
2015.0.3416

Dr.Web
Adware.OpenCandy.49
9.0.1.062

ESET NOD32
Win32/OpenCandy
8.10081

Malwarebytes
PUP.Optional.OpenCandy
v2014.07.11.10

McAfee
Artemis!53F3059C4BC4
5600.6838

VIPRE Antivirus
Trojan.Win32.Generic
31174

File size:
1.8 MB (1,876,010 bytes)

Product version:
1.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:5a14HYPQ+M82b3HfbzbA62HT8IhErVqdZlQDWb:Q140Q+KHkzz3hIqdIg

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Entropy:
7.9934

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file wifihotspot.exe has been seen being distributed by the following 11 URLs.

http://fa.softoware.net/get-wifi-hotspot-utility.html?ir=1

&onid=18508&oid=3001-18508_4-76081173&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=networking/wireless&topicbrcrm=&pid=13593784&mfgid=6280888&merid=6280888&ctype=dm&cval=NONE&devicetype=desktop&pguid=bb673ada088bd35b48023e5b&viewguid=bGHViEeP3Rqn6cAiMct1o3RYn8CSG5JOiBGP&destUrl=http://files.downloadnow.com/s/software/13/59/37/.../wifihotspot.exe

http://d.baixakifiles2.com/?ic_user_id=9289&data=38wDi21vWHgvJX938B/6FozNx8j9x8SLVnnxK4NiJFIu12eKFq7zR/cWvvh0VGulO 7Cw1Ntcg7T2M3HVig3omHSZ5i6Gv3 jevTbrf8aK7a8lJOcgxlUAK2cRbLK39FazqPcsAEWllpSrM7DkOksJRKthjHbeqHQyeCXnpBPM5TY3q35ZmV5XNVPxhkEIfVAaE4DB/bCLE9LIUju39 BhUt5zmwh9Qw33XSajQQa1U4QmWyGGBshSdCQ1apeK7dAd6YpbG8N0v3RW XcCrgp7ZYE2MsKwhzPNv03bT1KdlOBulGkeDH4T4SH8joTdTNRFCHGOsjszRyalvTP 7RIBTPFqadj1NWBc4DrbqtSzm1SrM0pHW6jZDrCx8tAII1tqL3u7DTbje1bYHNt9SxRGj5xp60Qw37x qA nu9piNq6W7HXEp5OVQ jlmbu/E3C7OGkvf08hzI8UX1GIVSSex7QemFGgqUBkdWw4WZw45TNzzgSD6TZEEJOGHM1PmhR0f lADkGYxXNAp/v7TMbIvbDyW/NXp/r7NvsIO2l3760e9ndoMLiLIbBziqbqNM5BIxNul9Jn I49Gi5o4wJNfxBduhw//gkkvrmQYe31VuWij7fEeu4cpfDPKMv/eZkHH3qtsy 04YYRD9xjFwgXGp5/xeBKUyni 4CQLNJ7x7pj74zrPYtPUNC8I5ngA8ocxi3ezvh0HuoxT6rYFRna91Ae4AoZ9SgIVyFzd94H9s3yxrg==&key=psQMolIXtCHTMN2c/.../312hOyjSitqug9IcRcuZJfYSUwvwZjcjnZMl1aLEM3cA4oc2calDLbVbVnxXZH9YwkwjDJL19SvTPDhdLxDWirK1 1pKVgIhCMOmerFRMqajIizMmqzV6PVGZSLuo

http://files.downloadnow-1.com/s/software/13/59/37/.../wifihotspot.exe

&onid=18508&oid=3001-18508_4-76081173&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=networking/wireless&topicbrcrm=&pid=13593784&mfgid=6280888&merid=6280888&ctype=dm&cval=NONE&devicetype=desktop&pguid=b5c1133bd2ed03d7f9432294&viewguid=bCM22-BrAo1mDyTtMAcYVseqMymp@XrCv3p2&destUrl=http://files.downloadnow.com/s/software/13/59/37/.../wifihotspot.exe

&onid=18508&oid=3001-18508_4-76081173&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=networking/wireless&topicbrcrm=&pid=13593784&mfgid=6280888&merid=6280888&ctype=dm&cval=SPIGOTWIN&devicetype=desktop&pguid=fdac4786c82a2acc81c78710&viewguid=a7RjBp2Wntg@OiKk2wcGGouk2RXA37X5@9B2&destUrl=http://files.downloadnow.com/s/software/13/59/37/.../wifihotspot.exe

http://files.downloadnow.com/s/software/13/59/37/.../wifihotspot.exe

http://www.jetelecharge.com/.../tel.php?id=7819

temp:wifihotspot.exe

http://software-files-a.cnet.com/s/software/13/59/37/.../wifihotspot.exe

http://www.gearboxcomputers.com/.../wifihotspot.exe

Remove wifihotspot.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.