home

freewifihotspot.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.towerpresentbest.com.
MD5:
7977fe2ed6b4c420e31e6e14b3c3fd2d

SHA-1:
74710d243f8327534c805793c2b45b2269235e30

SHA-256:
0ab4e8de8e7e23d4ccb5aa0be3d9aba5b694149e612657f8a80072d5be2b7c85

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
9/29/2024 12:28:31 AM UTC  (today)

File size:
945.8 KB (968,501 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\freewifihotspot.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
24576:nWC0bovU83ANzfP/1H8XDGttKLwv7wXSIngKrcUIIrPAv5H:nfa83EP/1SDGttQmIzcUII8N

Entry point:
1F, 8B, 08, 00, 00, 00, 00, 00, 00, 03, CC, 94, 5D, 68, 1C, 55, 14, C7, CF, 64, A7, EB, 66, 33, 49, 26, D9, 74, 49, AB, E8, 16, B6, 92, 54, 09, A1, A9, 58, DC, 20, 93, DD, ED, D2, 48, DA, 6E, D9, 64, 2B, 95, 46, A7, BB, D3, EE, B6, BB, B3, 61, 3E, A8, DA, 97, 4A, 2C, 78, B9, 14, 03, F6, 41, A4, 82, 22, 4A, 1E, 7C, C8, 43, C0, 20, 22, 63, 36, 42, 04, 53, A3, 14, CD, 83, 68, 1E, 7C, 58, 48, 1F, 56, F1, 21, 7E, C0, 7A, EF, CC, D9, F4, 23, 42, F4, 45, BC, 30, F3, BB, E7, 7F, CF, 3D, E7, DC, 33, 97, 39, 76, 3A...
 
[+]

Entropy:
7.9859  (probably packed)

The file freewifihotspot.exe has been seen being distributed by the following URL.

http://www.towerpresentbest.com/c?x=jyMUdx8M7RMoLgP37Ji6iDc7bDw24pzXWN65Y6meetw=&c=YxR5d8AGOOo0i9MffaPMnxjeST0zHEJhssnDLVhfuQ3BqED7u0uKQomCwmfWrTjkZHTXsJkXqWIg3JhJ0x8oF6X68ZHThB2prRB7zOFFbr5KSao2YwnMaaOE4Y4ZNnrP&downloadAs=FreeWiFiHotspot.exe&fallback_url=http://www.downloadonic.com/free-wifi-hotspot.com/.../FreeWiFiHotspot.exe

Scan freewifihotspot.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.