home

wifikeyfinder.exe

Wifi Key Finder

Gear Box Computers®

The application wifikeyfinder.exe, “Wifi Key Finder Setup ” has been detected as a potentially unwanted program by 2 anti-malware scanners. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars.
Publisher:
Gear Box Computers®

Product:
Wifi Key Finder

Description:
Wifi Key Finder Setup

Version:
1.1.0.0

MD5:
33e1dc202d9e6cf629a74e5620267331

SHA-1:
2cf561fc6c22b3a98d1aea87a58eca816c260c27

SHA-256:
c0bc3ef3e0656df563c59f6c5253aff97553a1d7b54df47bdf74a85cf8398240

Scanner detections:
2 / 68

Status:
Potentially unwanted

Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:
11/16/2024 9:01:42 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/OpenCandy
8.9619

Reason Heuristics
PUP.OpenCandy.Installer (L)
16.11.29.17

File size:
1.3 MB (1,374,535 bytes)

Product version:
1.1.0.0

Copyright:
Copyright© 2014 Gear Box Computers

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Vaikimisi

Common path:
C:\users\{user}\downloads\junk\wifikeyfinder.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:5nack8Dd4kS1yxpdqabRhHFO5MxxActUDdfKmD/xnphZh93qGQJxkTC:5aBk4kSoxHqalhHMev2xTl3i

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file wifikeyfinder.exe has been seen being distributed by the following 19 URLs.

http://gsf-cf.softonic.com/2cf/561/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674400&instance=softonic_it&type=PROGRAM&Expires=1425256845&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=MRnn1cSmg5CR-FmT-DtZ9n16Ay0GXeoZGTWyIJxtcvKB2M6FJ5kbohHlOsRyBD4qE89TMcMs98D5msqZg3ntVYYzTjeM9V5WFMe9lT-Mkl2IV7P27uesfSfBij-4l6Jrfm04vGEsWO9naClwwW4zaiQ2ig7F0h--VyWDKSDrzpU_&filename=wifikeyfinder.exe

http://gsf-cf.softonic.com/2cf/561/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674400&instance=softonic_es&type=PROGRAM&Expires=1426554082&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=bwhJTThglIqMhqCS5mlGkYnzbvB7IYWD1qk2h5Wi0flxW69IcltAcN15smEQvJ3ZxkF~A55culHmZpzlmNle0gyzp8syjLj23GBNbNHCZjbrPvolqZD9zPM6OlEkNaOZ70qTw4WPzuNG-~jrgIAzjIE2A2UMoQGWbIB-fhJ6NMs_&filename=wifikeyfinder.exe

http://gsf-cf.softonic.com/2cf/561/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674400&instance=softonic_es&type=PROGRAM&Expires=1428938472&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=ctOIOLCFavz2KaIXWhNSPY3IEdDLljRAr~kjonZjNR8uNR~A6M~GqMSsa8ee7SDKEUbskyrIsGnOhvLPizB0~MBGsC5D6fBKXAkL1VmugvCcJc5i7SNJY-g90o~2LzgkTfNkcj4sxUZ3-UflFWKc25fArd~W4JhzsjFVxMCUVH0_&filename=wifikeyfinder.exe

http://gsf-cf.softonic.com/2cf/561/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674400&instance=softonic_en&type=PROGRAM&Expires=1423593483&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=V4EYyREpsfzmZyzIouAK~Nu73jOVdMlpGYlNOKFCn9zUUp8J2YvjnZpAjGYUVbSkXLHiZzcfE~dQLubjQ-rEupTbwCwU6q5fEjdWZ1NPT4W5aoNAUZ8vsUYWkbXc4-JlfS2ZipF73QaY0AvxlXr2VCktHwI-hb-DI~h5eXY9iuo_&filename=wifikeyfinder.exe

http://wifi-key-finder.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/.../17WddIve155R93L1TvLRWYK ZnlvChGaD5bgMKpy dpFuNuj iDYjvw B4whDwTtHMp8daIqM=

http://gsf-cf.softonic.com/2cf/561/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674400&instance=softonic_es&type=PROGRAM&Expires=1433725033&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=fGnagJcIn24Wj4dFuh3UwVddnCeuvsMb-2vRzrFUUfn6o0K2DcNU~X4s5kAuMXTJqMEAs9V4DIIjaLqGVsP1ro1qQ3Es9336jFLk3irSXkIf6oWxaCVtVMnFCzysxJALjBYupd5uDO9ugDGY3tD6c70YkY4YbWcuVAP1n-ad4k4_&filename=wifikeyfinder.exe

http://gsf-cf.softonic.com/2cf/561/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674400&instance=softonic_en&type=PROGRAM&Expires=1425877314&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=bGxfpSZtLG6nvN8XfvHasPBZ21ZSUVQGrrQnXhrsfQnJILLHAswmLHTgQqBGUIzIB16i3MuDpNh3WZmwAZzqAadgFYoIgFcbm1QofgXrnivMpbROpiHV1K0qyt5TmxdpG9JH8eOnKkbk0HPCnObG8UuEu0c7Z7uTJKwFy4j4aRU_&filename=wifikeyfinder.exe

http://gsf-cf.softonic.com/2cf/561/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674400&instance=softonic_es&type=PROGRAM&Expires=1422965324&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=NGS5G0IF6iULnktDnTfUeUD-clsxfrw7Uso5-h073pt5NwezVsrYh38a-bT9HvKkx~gZ2glSEjJ2v91Wkh8EkmdF0Qyzrn0QSU3hwiHHrEF1DKKuNh7SMDBSxWsBn2m30oCjHanFlURazKpaVcjLZgWvJIn2pYef1KA-79xQe9k_&filename=wifikeyfinder.exe

http://gsf-cf.softonic.com/2cf/561/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674400&instance=softonic_es&type=PROGRAM&Expires=1426025024&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=IeBozQhn6POBqxa6g-i7SFPxT6iv0FM9DkPJfaNVrksqMUk5fgrLaP8HaozaMr9v-9DtSZziDG9OrYcHL89w5r9oHMynAryDK~kZRuTDPW7RX9hlyBiG415GA3-rba2ZkyYJF85mVmyB-snzU2p2X7BArU4sBlf75SKfg8s1ZfA_&filename=wifikeyfinder.exe

http://wifi-key-finder.software.informer.com/.../

http://gsf-cf.softonic.com/2cf/561/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674400&instance=softonic_fr&type=PROGRAM&Expires=1434415134&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=NXMqa16E4ngeOacs~S4RTyf2aimPTaRiXmTugUJMloN32JYt8fpeFW77AGQdmaAcye5llziZSx1amMCbzy9hgeEeUL2vlJ~fHE4u5m9iuqzHCHln9ST2uT9m987JDMFwsuZEmTcPotL1S9fYh6DpGJKCOd0oZVbt-pA1L3gnc6Q_&filename=wifikeyfinder.exe

http://gsf-cf.softonic.com/2cf/561/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674400&instance=softonic_es&type=PROGRAM&Expires=1425008289&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=T1fzFcB6lNccKh5QQxXoUGQhl5tMaG-6C5iR-bolshEzRpKtVszCAle6pn3Im-wKQG5FfMeiZFMfF0ML5ZQ9QTI1RkFHJ9jd2J55pfbF-SMHsjLjtP~hWDaFVcQDOaesenRaEbE85~o6XQvBaxJ~2wrdQ~Pwxc2qBKj2HGkhBQc_&filename=wifikeyfinder.exe

http://gsf-cf.softonic.com/2cf/561/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674400&instance=softonic_en&type=PROGRAM&Expires=1435889615&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=VGeq9Ha0h4udAfsyUfAx2LGs~oVLJICmJ85AMx3dmJNe9T~3HpK~PoJwOPTJYa90x1xSgAh-99~J00aL2tNPjyFH1bDCeWjjE3eXNEmeEm-LeaC9f0VPTNZSO7wXbfpPHHWp6i3tZY61Q4et9S45HtxpfjyV24IXwqSqrf3wNBA_&filename=wifikeyfinder.exe

http://gsf-cf.softonic.com/2cf/561/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674400&instance=softonic_en&type=PROGRAM&Expires=1434164754&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=VGpiSbYwcLUs2bvfFb3JFAcUpQNTAa01qlvcOEqO00ZJL395NliN1hM3fxQjowZAviXCVPJ6hlOqrCdi7j3-g3Wfrx2KeroAPsoKUPUijidrkkc7bOBnFZ7kKmImduiYt96J7NzZV6VuYiVqn6AO6xT4VBlwjEuh5FzI7ckGONw_&filename=wifikeyfinder.exe

http://gsf-cf.softonic.com/2cf/561/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674400&instance=softonic_en&type=PROGRAM&Expires=1432399021&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=hvdFIjKWkzU6iiKPS7gdPW6Lrpd0S6EsRM~kVPoPdIGNpeUb1U6zuQPcCfn4vdNLKYQ4pJ2abSqS9KHpsKbSZyOCXmJGJ-bYYNz2CEa27kBRdWJDGhO8QjBn7tEWKN-HUy1adRkf~S7rc~qZmgKzH2FOeoO0X1EgonCam1yYwv4_&filename=wifikeyfinder.exe

http://www.gearboxcomputers.com/.../wifikeyfinder.exe

http://global-shared-files-lw.softonic.com/2cf/561/.../wifikeyfinder.exe

http://gsf-cf.softonic.com/2cf/561/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674400&instance=softonic_es&type=PROGRAM&Expires=1426883354&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=KqgBmNSoqSQBIP1vvldNyqpH5PtA9U5jyzt~J6Au4QS4yzok~OO5tgM1akm-FO9eicmNkmymxkC~nJF0B3Tv9KymHgPvvcFIyZrbHixMLHmgO-YVjeebOi0CjiT1KISjFsmgJ-4f82Vsim4oi9am-1ROxhc27lJyYBEdthRocEk_&filename=wifikeyfinder.exe

http://gearboxcomputers.com/.../wifikeyfinder.exe

Remove wifikeyfinder.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.