wifiprotector.exe

WiFi Protector v.3.3.36.304 [no-av,rc2] (2015-06-30 19:50:41

Optimal Software s.r.o.

The application wifiprotector.exe, “WiFi Protector. Your personal WiFi security guide ” by Optimal Software s.r.o has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from www.wifiprotector.com and multiple other hosts.
Publisher:
Optimal Software s.r.o   (signed by Optimal Software s.r.o.)

Product:
WiFi Protector v.3.3.36.304 [no-av,rc2] (2015-06-30 19:50:41

Description:
WiFi Protector. Your personal WiFi security guide

Version:
3.3.36.304 [no-av,rc

MD5:
19b0e68fd904594b05e5a5d2321f32e0

SHA-1:
e1cc45738dbcf723236c0408174244f560baca90

SHA-256:
4fb18dcd4c9a9b3ff7ea893f9245fec2dd2dcec813f9c4d3365136157de59a3b

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/26/2024 9:57:17 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Speedchecker.OptimalS.Installer.Meta (L)
16.6.10.12

File size:
6.7 MB (7,031,256 bytes)

Product version:
3.3.36.304 [no-av,rc2] web-wpbe

Copyright:
Copyright © Optimal Software s.r.o 2009-2015

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\wifiprotector.exe

Digital Signature
Authority:
COMODO CA Limited

Valid from:
10/28/2014 7:00:00 PM

Valid to:
10/29/2015 6:59:59 PM

Subject:
CN=Optimal Software s.r.o., O=Optimal Software s.r.o., STREET=Jablunkovska 2014/40a, L=Cesky Tesin, S=Cesky Tesin, PostalCode=73701, C=CZ

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
50C21E22FC95CC7EFFB6E44F30CE0384

File PE Metadata
Compilation timestamp:
7/9/2014 2:58:13 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:LOdx57a1LTeGShYvlwcnbrUGlrg8e+J7c9V+1u8G6DKGVtbpVsAmeIzxa1M:L25ORT1twcbrxlrPJoV+oxGpiAmeIN4M

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86...
 
[+]

Entropy:
7.9962

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file wifiprotector.exe has been seen being distributed by the following 50 URLs.

https://www.wifiprotector.com/.../response.aspx?&requestId=1045670ad2de4b68aa05a2f5f7e8cab9&encodedInstallerPath=QzpcaW5ldHB1Ylx3d3dyb290XHByenlzcGllc3prb21wdXRlclxkb3dubG9hZHMvd2lmaXByb3RlY3Rvci5leGU=&edition=

https://www.wifiprotector.com/.../response.aspx?&requestId=7f12301b2bdd48268a3d133b855e852e&encodedInstallerPath=QzpcaW5ldHB1Ylx3d3dyb290XHByenlzcGllc3prb21wdXRlclxkb3dubG9hZHMvd2lmaXByb3RlY3Rvci5leGU=&edition=

https://www.wifiprotector.com/downloads/download.aspx?aliaspath=/.../default&affId=adwords&keyword=vpn&referencedWebsite=www.wifiprotector.com&language=en

https://www.wifiprotector.com/.../response.aspx?&requestId=5961923dafe840259cf963e0b9717f73&encodedInstallerPath=QzpcaW5ldHB1Ylx3d3dyb290XHByenlzcGllc3prb21wdXRlclxkb3dubG9hZHMvd2lmaXByb3RlY3Rvci5leGU=&edition=

https://www.wifiprotector.com/.../response.aspx?&requestId=4547c326779b480280d79d0bbd5dcaa6&encodedInstallerPath=QzpcaW5ldHB1Ylx3d3dyb290XHByenlzcGllc3prb21wdXRlclxkb3dubG9hZHMvd2lmaXByb3RlY3Rvci5leGU=&edition=

https://www.wifiprotector.com/downloads/.../proxy&affId=adwords&keyword=proxy&referencedWebsite=pl.wifiprotector.com&language=pl

https://www.wifiprotector.com/.../response.aspx?&requestId=5ad117d86e534695b96e09c78cf5ef4b&encodedInstallerPath=QzpcaW5ldHB1Ylx3d3dyb290XHByenlzcGllc3prb21wdXRlclxkb3dubG9hZHMvd2lmaXByb3RlY3Rvci5leGU=&edition=

http://downloads2.connectify.me/?src=

https://www.wifiprotector.com/.../response.aspx?&requestId=41815206330e4f30bcd902b61fda54cf&encodedInstallerPath=QzpcaW5ldHB1Ylx3d3dyb290XHByenlzcGllc3prb21wdXRlclxkb3dubG9hZHMvd2lmaXByb3RlY3Rvci5leGU=&edition=

https://www.wifiprotector.com/downloads/download.aspx?k=vpn&aliaspath=/.../changeip&affId=adwords&keyword=vpn&referencedWebsite=www.wifiprotector.com&language=en

https://www.wifiprotector.com/.../response.aspx?&requestId=a417001acd22425ba4d288e705e3ef8b&encodedInstallerPath=QzpcaW5ldHB1Ylx3d3dyb290XHByenlzcGllc3prb21wdXRlclxkb3dubG9hZHMvd2lmaXByb3RlY3Rvci5leGU=&edition=

https://www.wifiprotector.com/.../response.aspx?&requestId=8d97575674c642ea8f2ed4d5812b0d04&encodedInstallerPath=QzpcaW5ldHB1Ylx3d3dyb290XHByenlzcGllc3prb21wdXRlclxkb3dubG9hZHMvd2lmaXByb3RlY3Rvci5leGU=&edition=

https://www.wifiprotector.com/downloads/download.aspx?aliaspath=/.../default&affId=adwords&keyword=proxy&referencedWebsite=de.wifiprotector.com&language=de

Latest 30 of 122 download URLs

Remove wifiprotector.exe - Powered by Reason Core Security