home

winhotpot.exe

HalfBaked

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
HalfBaked

Description:
HotPotatoes 6 Setup

Version:
6.3.0.3

MD5:
62608c593d4d2f70806e7674149c13e5

SHA-1:
3b2f9f31f6cd5bd22198cb4ea47c20df7b04f83f

SHA-256:
116614748760f23ad0c67b83ef587ebfb04bd7e93d4f234ee983fbba75977a53

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:58:43 AM UTC  (today)

File size:
9.1 MB (9,548,526 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:2tfn6kNs+HzGdHV1vZFUzVUvfZc8Swac2dGly7Nt7wChD:2ttNs+HzGdHVV7UzMfZc8SBcq7bL

Entry address:
0x9A54

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 72, 96, FF, FF, E8, 79, A8, FF, FF, E8, A4, CA, FF, FF, E8, EB, CA, FF, FF, E8, 12, F3, FF, FF, E8, 79, F4, FF, FF, 33, C0, 55, 68, 02, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, CB, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 06, FA, FF, FF, 8D, 55, F0, 33, C0, E8, B0, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 23, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9996

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file winhotpot.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/3b2/f9f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10249&instance=softonic_br&type=PROGRAM&Expires=1480571994&Signature=as4kAQQO~tZQjGRe4u4kRElOjQKQLaSE4VW0rI3nPni91QVdANrun94zy5wSrr2CPABM-IfG822LfmHXrlsJ7QlxCLR2xhwMb-mM76yOZJJXBaqxzhz72KrAG1Y8VGmsZBDHymP2-AUxHFBo6DInQeeTHK7I3e9aPcYyO4HC-50_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_hotpot_6303.exe

http://dw.uptodown.com/dwn/bmfhi4gcC2dTvBrCU73Dn5XnOxo2g7COO1V1mnoXdOjfCQWSnqLTVz8onqXoVbG52jmmKFzvR3KEY_EF-334R_VDQnlk_KPz90p_Yhf6iq3p5FIhRZvQq_PaZJBiM7gJ/knippExOk_BN3wrWwK-91ANPtUTtJ3BAgAKMZrU48e9u4EayhPR7El15aVH_evxktGP2zHCk2V4H6jrvbl3cjwp4UcATYtt79N_SCtsA-QCN0ggFap95WXCGcWROMEsL/kWL1BTRmfA2YpkLaXyryyqJmbFUo0G7jNVniNlq43pzGwP763XtudcY21XYc-tAGdNdUEnh0MICyUyIgAW8tTNZXQy53AjPCbzrjAv1Jew7mOskpPtq9R47LD79slPqS/.../

https://dw.uptodown.com/dwn/6Rew5Mz8pyRusKf_tOo5vLTnb_57kyK691_ctMe4TlDSHgBRaaGGYwV_ikQIFf1A_2kldlawWCoZurb2y75No2nkQHneDOqNm2sp5gukX0uqbazUjQGrrLD85xKM30f-/OlS8_qsrcfMOcu2BjH4p4dJU6xwfgOxth0G3o6v3nCmd_KTlNWlK5zIziGTr7tXFYsDsSxJDzAxWTuQgEx_2vmjkEJ9qBPEAcbANYgeXZrjsnDjiqspGJLTmSnmj4qAN/dmuXmoZ6xAVghfPhvfytrB5THxYxXr_RYbieDsBDDALd4Efa0L_94S8WLxxBX4Ml3ws91BPtFOpB4IRhiqMrXnnF_1pgYX4iRSZmRtyOBe8PpH8s88ur_RIPJVuxR7il/.../

https://dw.uptodown.com/dwn/odXaQLhAFqgeAEbtnrAyUph3oNNifSHPWYgQ2vdV4CgGW5A28Zh5wd5BHp2iY_aB18LrYayvO5q3LPQ30FnNrT7DzRYFbwv8aubMuctou0lXysotqsOammGyAA0yL-oB/rSxP8KSo4nXtFYirZIQjI3N-yuU6KG__BG97PdjObFeF8WCO336QJTDfF5e7u2sy5PqZmr7xH5WfLOyIc7wmvnFHKPssCCUI7oem67DKkzkyeRly8cCtH6cs1-lmBeNJ/D4iU8s8KfjdebuLRzL4_F6qG7B7JKQ2njCiz9w-KJ_vBb_bWZFCThjECULgMGKWcg-O6-x3geI7SKHt18uIPqTtRPmOcsTlyeehsgWl6IvgAK_GCWP1i7eUg773kJISc/.../

http://gsf-cf.softonic.com/3b2/f9f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10249&instance=softonic_pl&type=PROGRAM&Expires=1480141008&Signature=TAE2YLSSprqbfe7e9rZX3M0uQCQkkoXDZY6PpGAecEWE-dWNkrRO29gZSJsZRoU73bAejs5RKWigHCMg6A7xaCp8gUh5DC7iKLq3op6vVLWDG8QEUPpvTGNtBIs00M7gvZgnCNYXoi02F~lYDMQ--4x68UwIyMVoRa~zqp88W7s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_hotpot_6303.exe

https://dw.uptodown.com/dwn/3SNATVKjSAKKsLPROJnwbKzuNfAXgXepgymDQqybAKiVk9FbB01zcY9QC-94i2ef4rz4j6cpYkxGuqQypMd_OCflQ623b8b9s5Go3-YjGa8fFJ7sZpv_4dSVHkNdnOvC/imyE2BY4bmMqP4tgdUj-POEdNaBN_wcfgb0hH3E-E1vV48NmaPN5GiBQ07VLoA7QGIdURUwNdxkxJTdtcxOdEm8qTIUhsUf_dXgij6Bdkv3_xfe2DLqaBSp16VNhVsvk/tuOx7uUB6buM1BCqR8jxL1iyqLv9TXHVcq5xdhVG7gteGP6psd5e6PVnmWXyoa3wEWC-K5ddl6oCAd2FtT1m7B7j-zqyxPwhRA6frgSLmUH-7dWk_OHxE2ELkwx2OXaF/.../

http://softarchive.ru/.../26657_Hot_Potatoes.html?num=1

http://gsf-cf.softonic.com/3b2/f9f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10249&instance=softonic_es&type=PROGRAM&Expires=1462496103&Signature=SWgTqKljD-l8aZonbqciMqSPlgZZ1HDYX9pV3iThgo1MiAnQwoDkar~D2aEOnfAjINwBbrxfpJuFUN1IZHxg-M9FBuFF9LGtKp4ncyXM2junL28LSX7K6Y70hipxlv0Q-gPG5Gym6ZiHOG18lYB38vmF9pCKZIUvCNJ14wSNJj4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_hotpot_6303.exe

http://dw.uptodown.com/dwn/MwjB-wuiz--5Bqe1oDIWwXfuCoOBi-_2l-eDXkotsE0gaPA2tzLlV9Gu60YaF_UOF8Tmo4s6vmzZcP8NisL0O3ig__pSC3m2f896fqgTMWoBuVxiNdZ1BckX6_u9jAST/BNb0W9Z7YxJmx7ItIBSTrnObIIJz8T5VMva8ZvSdynwIILThaBFvvFnL0x1XknOrRtNmeDs6TOkEW5TUQwrxUayjpBCIWlL3FJ5DhX4wIQeb0O3hXBSvs64Jid2EW5Fd/.../

http://gsf-cf.softonic.com/3b2/f9f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10249&instance=softonic_es&type=PROGRAM&Expires=1447956516&Signature=YkdWXNDlBjdAw69SfmzCImZRmyOZu~gMOzBpTBclgpQ4OTGSZtdqOcdqu6bNGhpv31q-0EM~12mLD3rqOI5pwPI3W3OhhlJ0ZG765nZW10AmUK0qQt8~yEuDn~kHPfEzto4X0rTJDBvnIzx2rWdLYGkie24bwLZiWiW87Eom~BY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_hotpot_6303.exe

http://gsf-cf.softonic.com/3b2/f9f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10249&instance=softonic_pl&type=PROGRAM&Expires=1476519023&Signature=Ih7R275vM40uKM2APclwNsMBtCbPAe1YkJutupOJNmizzk8Rzoix70aIaV30SnB0PzgL03wjrwM3x23xu7ef001A~BC4eara7mI5aXCx7tqq~vCu9dNxPPFCZcLLHojD2DqAXilaDZZv-iaioe33UptVF6LM4br56dr2yEyM25g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_hotpot_6303.exe

http://gsf-cf.softonic.com/3b2/f9f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10249&instance=softonic_pl&type=PROGRAM&Expires=1448310816&Signature=SVLvyo7fEUg8kYrOlxfCd99wrymPx2p8rcnodTzsBunEcHUiIyOzIDhZTzIExfi5UH0yjNPXDnBLpBpAo4Yh1nL0hlSwHl20kRuOCBCz6Cux5lnA~ESvij9I5OKayEaz~LzcMqwgw1FgM1pZg65QSc7PvG4Hss63nLoKaRYzB3c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_hotpot_6303.exe

http://gsf-cf.softonic.com/3b2/f9f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10249&instance=softonic_es&type=PROGRAM&Expires=1454732084&Signature=FY5X-3Riv5aoM4bFNeIPhLc2dpgQwqCBaRKIavAkEPBleSb7078DOH3aajp62NCaudekaydFt-ElmRKvC71jNwwR4bateIIx9gxAuKYG6vmpkGpyJVoeztwSL2C1CmDX~7AiiKAdJJgX154-me78ugzvDf52uuvFBieMoyMuICE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_hotpot_6303.exe

http://dw.uptodown.com/dwn/FElnVgiyJpfoS1JSxmpMRvfshWXXkWiVr8P89dZt4P1Zd3zUTKwwgbuC-tWd2fLt31I6avUll2ntHzUtCYaX5HE0BYpZGdSsES0KmxH_IuUBZ6Kfk86zt73ydKMYaigk/gMt2lVIdtkDadeafYlDaR6uvj-BJaFclbBy9CsZiti3cJPuIe3qrmWkmE7c15R0O4vFSaqMX5RWhao38i5rECDTwYqLuFKLStraXOaUqeQBgXuBSGWlgqXXb3MjDZAhm/.../

https://dw.uptodown.com/dwn/VN2aty-w0p9u9trRBL8qX3c5ohrYQo2FhEV4jPzd3jRXUd6o4LDojFfEDLg7WqM_0xpC2lw-JIT3naFa3_0fZRNzzOAsEuBY0AGvSJa6U767ft9IxLYQYnpw4u4wAWXP/22WNYflVQpPLs0gHn6D-Gzh6JbLynoHiyeVQTSIWLtVS9zijHtuAaJOspsAd32tz8oD29hfVEEi7kjZBInKSmo7uY19Np94W8cS0CQ7AuSRF84fkBSWfy2I-gBeoX3qw/rtmtD70GwxAmoO9xR3YaGDtYyO-AsljK5NT8iuNcOe5MfhU0euP7KIrtDn0lPGtGBvT6eJb-_AbtRWxphtiUArvrEKpewQD8wbV8EQSMpV96MnOCgz4FMN9P_G5SYV8u/.../

http://gsf-cf.softonic.com/3b2/f9f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10249&instance=softonic_es&type=PROGRAM&Expires=1440239567&Signature=CrqjAAg22xRyXwEyOixxYuQ1A-VFcfje2IAuHw4gYtikSeLxFHhIxPGYXu~cqAQgClBANdP8btM6lsEX9NEug9E~d57WU0ece37qVotLNRKEwQ98zyoJE61r87uYC~afbjvCb-LlYBvToHXYLnPDqvs5DIwqFoC2xoD6U~cvtqY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_hotpot_6303.exe

http://dw.uptodown.com/dwn/-y45msZOl6uY3CESu14EDYbH5ZaCHk0hN_vYsP5HAs6mYLIsGhucrHkCqhxHAAYB92i1QDFpY9trt6IVE8fkSN7xMF0EsQgKP4dtsdCG65eiHjA_tksAGXabU2UWeHEz/MKSg3wvue_JQxPsmq7xiIzF9BhNF1INuztb6ZKoEF8JPw7T45NXjOUq5JIIBePpSBNTM-udYKSDRvb6d2Y0fixWMrIwix2Z88ZgFzQT1cELBigSw_VZmx2o63CiweSJV/So6nIdDfzLUHmiJo_QcKzEWeK86z_tHWvDNZhEFQlCRJc3qycWOcCLf_olbT-MAAbUrpf35MEd17Jm18qnC0Qewm-tHLvuUJLczPuK-DlPQqoGNTQATDWnDtVX-2MwOH/.../

http://dw.uptodown.com/dl/1445277558/.../hot-potatoes-6.3.0.3.exe

http://dw11.uptodown.com/dwn/wtqcnqFkKB5HVCQccqAipjgh0J94Z3MGyKP83iOKPHaAzR1FKH3Ck1-Ny-ehkiHtti1ZgkXSjkgJw0F9CvDhzpmG8pfp8rb-ztW-DWmuf6llEM3fJW3Z3BcwaOxyYcX-/yL68MdQ9Fw1hLyzjI58hIN1WmLwkYXrWs2scvM0T0hRCwPXFQIpSG0T7yxBJGrBtLYpYWOMuymedATBbbRLX48NQhW0NThoaiywo7ySjffzONPW1e1rf1iNXsxHc_150/.../hot-potatoes-6.3.0.3.exe

https://dw.uptodown.com/dwn/4YRqF_2S9_V9j0olL7mz6eqW4ECcXkyeynkNJUKF6wYz3B6wkwxDf94LK6UoCWZUPzu5MEc0j4aKGalz32ZAgZbxNFuzZAQBpf1UhRLGD70vPvX4VM0mN-YE9UjruNqP/M6pK_hK3AOLsE53IbJOgA4HO_AK8SBDgRsa-kqGm8I1wz8PIznvZUDTQ7IpgwWHL1KCLKFoAr1UJy7gp-UTYPrOPwmLE1O_B_sBfN5NPlEpOLFD2aPkmYUVKauTM7t8X/vKExATv1aEBAW433yTvBVmN-gdMbATe3eMPTcNKnuVCgXGIiUFxDPO21b71PQ23yvvhlSNYKSFzGG2Rg3CkZDKgnipyGY16A1t-sP9fMeW7j6h4FwZnmtkrVdOOx5fFP/.../

https://av03-15-16.uca.es/moodle/mod/.../view.php?id=83313

http://gsf-cf.softonic.com/3b2/f9f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10249&instance=softonic_es&type=PROGRAM&Expires=1457399040&Signature=KVNdSg1mgKGTbvvhicME~gaUNdzYCoqX-~0yl8iRuFOjQv1kEdU~NMZm4RDA~KZamM2XwwG57mH~cIaHbNDMK7EbjWANt7sjCKVF43a1AP00yXPbmRy~7KKeM8XR2goXaSgXsImC2dVhL65YMj1Nlpio6VVz9hFlZ9~181T~Dj8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_hotpot_6303.exe

http://dw.uptodown.com/dwn/UtC9l3a3rmcMbntVLGSZGhyV9_bE9Fixg7Seqfb379SpCoQj_CYyFSBwTEcLDYAYsrUbduN1Sqno_HGZ-cI0-zuOREuYzcpUkC5LvGyhBabj_N5A7NUHGGJK_vdlQNuL/_rq3c_DnQeyxgv5C9sIube2eJZBwc3IIdKkxTAbm_9OSZxRUscAgA1VwsCRi8t2WJ6GXAAOPRfhCLJz2OZrLcM5-bjTHijHWRt0PtWYcCewAbh-Yl2tUVQwvcOMcIBuf/.../

http://dw.uptodown.com/dwn/xyfnicLNljoEztDQ6F0QBki6cg5VY8tVORnlPcGbaCOLSsc_BSazbMT9KSO1kmBKqx-VKrq44SXGxQJT03bJzm4m4qHMDQQZpOUVkufAWA3dc1Zk8gro40MBovdfDXBN/ErMO4UGawYJHNijLywzdJYphJwgP0OeDWD4fvNhFEZDRPPefjkc7lem6LPcLXNrBRAbjjD4Ma0ZADnyhb4FBQTWzf3_Bj0X_aUJCDGftO7p-biD_rK1-fj_uf5OpCYrL/B0WR6qyHk2aww0LGofHGN_-6UKuSwvrsYwedGghO4d9Hr4I7tU-SGejwERC11XX_Yb4PeH9OkfEi_1V6wL3xdl-oY4ROKdjf8LRtsrMMSzQK1uC546MDBRS5K7wmxFeK/.../

https://dw14.uptodown.com/dwn/wnx45U1GGj6Gp4zAzJFWDkPn5Wv5-qG1UlzcyI-gZyguBzbfew6jDzCnXT7Eq9Rhgs-wQQ8qOPuNMNF-KNrpGEQfFCapCEyBaS1DQdl_lWeum_CwOjWhTpOMF7T9j-u4/q1ZeMNt48TB-rlZ6x2xhSeAjHD8ksfp5ASO0Emvrl7vpr8yL6NLELxzp89tOV1l_449SwRj34zCQVqvCMWlOSGsMMMC6WNe89NC_YHb1h8Jnm_CO-kluQ9gZBOvBjvlZ/oZ46FlgfE4pXAtNoPlRYwpuiM2hIabzYLAdjJVO6lwUP3tBZjcMdjxSCmYHH44yEOyGnm9QkTan_zGKAE-ToBbgNx-s5hbbgCB_ek4eN1g5BgpVQdh-8szd0KHleZUrj/.../hot-potatoes-6.3.0.3.exe

http://dw.uptodown.com/dwn/A6DW4W_lPyDwn-Pjff1G7y0bNYiAsox6huYqBVxGPMrXziCA_dIkKZhU8mzFFXeS-oc5JS3-KoODFxy14ZVUTd-hSNLBQtaRN81qj9QnMTkHeV7IWg34dau-ZHngIm_P/0W9G98bhufLZJ_7uU3pDVgRefWekAdfOK1e1e9TNjNbR09Q7uxFwIpiXUROcKmqI1QZipMCiHdK_gzKki3bPU16sR3x-ZozBh3SUd1pldkEsOy-qsb-2dWt9lvcKvyXv/tdV3nvoHmKpwmYBZn-TA9VoDmaUjvp0i36WEmQyVA5Ih_6JjMfTvrn-IrmD45U8-1eHP148leby-MUb-ESwWAqvqMRIlFAnCoe8a968W6Vb89AKrNNEisS8Elml7UNt3/.../

https://dw.uptodown.com/dwn/kvHTvK1DoHbKqmH7C_N0hxbE6ms-RQwnSS16QmrF5kUD8LVawxM7y9OZ9csRJZBkpOdTpCzaSasjmOyqAzVhnJK7f9IjAvjkP24yleefwVBucJb8jhEUNxG6Jx5nIv__/npXy7dEeyCV9zhkw3c98yBQ3E60Yj1tmRbwe7WpL2GNQ3UVL2NBx9JfBr58Jym01WG1qNeDibO7T-JE-qWa_5ABnuPOP2N8l8yZK9zoB54WutBNzqRttc3qHeFr_8M0J/Q2Piw8-X-nNLn_306XjwqU7Pd3E1fiBnXqaxmi90eMfSvVK7WHFbVJ8MgxljkoTisEMDmKsFxjzFaj-TtDpnr2LVrAJ_lgBlMbPBekmjVzX3emROSQfw2Wqk130ESKEM/.../

http://dw.uptodown.com/dwn/j68l9o-Ncp4-HzvkG6a6ZoxWRyuKqPjCfQndTvNMnCsVp0NBukfOnJNjpIqS3T5R9BBHP-Fx4wwPp2ydBSYpYO2ysxZk52cE2AcfpBR7vwR6-0BaBj9NPFEBBsLejca-/m_yUwxfxkhxpHkPDdsUMRFD40PGPlowt8uR8HHoKSPG8V4kE3XyOl-zqVHXrWIedbsytPvli45NVff72fQI4_kBK66znMgQCgjnLyqdtVfv2NpSdCWi_nTKbQ0Fo9hed/dlGNnrBH0p-d9scVXYEKf4CfDdljlKWlmknXLZWYI6zy-ud--us0IU5YF6GysTG5I54YTBwJImEgTqve_vUcm_3TOtNNTkiryGbgHJA6mcI5PACSAA-0c_EjobKaE-RW/.../

http://dw.uptodown.com/dwn/n5OZep95pyYBf1P_P-AW-_qe4bcGVoMX4XCa0_UqAhxP2gxanSq2ODhcOs0WQzXRN8wrcU0J63RRXOU04LfH1wRY6egzLDJ9BO0MT9AyrLo07EjJl4GwWRHl4DE8mkbT/oUhmKwmz4zqlxfl8JcMJw4JkRDtF96sKYXSqNkdqr54g7dKpfSWmT40DdRgEEl4Mbc8el8byscw4PYWJtBhShqStfVqaot1bGb1J7e4nQiKkYkkEr1-5zsr9TW3izEj8/eIfB43g36r05OIB8RQX9n384E4zBu0o39Hr7_56190aQ5ccZ_6zRVyL6ugZqb0F2TD5o7y9HscEAYVywPIX0WCvLhmXktjfiw1CuL4YmY7cu8YAS4c7xtsi0ba1bbTal/.../

http://dw.uptodown.com/dwn/98OT30vjB7c2drWv1oGuxh4jYfZUZSkmd2y9pgX62iDuMz91fcqnA6H7MY5a9jviR0G9l--zghnsG_p0288uzxQct1Ng8CCrGPCMWyykU4sA3wZwsKuT1HlO8h1GJMuI/0KJcEU6g24MVDFDEesukay7mXwz1ggJsjdPr0S_x9czN8Pd88ufBCRxZ8DkwKUbhKmhec6BI-hMQEwKT3An3poNhRqCpyaPG-tITdEOKGzNTzHMlIe8W_4XkxT40pMxt/.../

Latest 30 of 163 download URLs

Scan winhotpot.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.