home

game37679-2361-torrent.exe

Firefox

APEP

The application game37679-2361-torrent.exe by APEP has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from s83e.storage.yandex.net.
Publisher:
Mozilla Corporation  (signed by APEP)

Product:
Firefox

Version:
45.0.2

MD5:
85cd0824b6ae59ad1dbbf5da7253ac1b

SHA-1:
f37df23bf336bdfb521dd3355523d3eef2671809

SHA-256:
42831db69c9e6993027b32e88ff613d73512f137cbcb1480d26e8202930357a4

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/27/2024 5:49:02 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.FileTour (M)
16.7.25.23

File size:
2.3 MB (2,402,736 bytes)

Product version:
45.0.2

Copyright:
©Firefox and Mozilla Developers; available under the MPL 2 license.

Trademarks:
Firefox is a Trademark of The Mozilla Foundation.

Original file name:
firefox.exe

File type:
Executable application (Win32 EXE)

Language:
Valodu neitrals

Common path:
C:\users\{user}\downloads\game37679-2361-torrent.exe

Digital Signature
Signed by:
APEP

Authority:
COMODO CA Limited

Valid from:
6/10/2016 3:00:00 AM

Valid to:
6/11/2017 2:59:59 AM

Subject:
CN=APEP, O=APEP, STREET="Bajkalskaja, 216 A/5", L=Irkutsk, S=RU, PostalCode=664075, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
77C5C9138FCDB38AC8A8BF46C3C991C2

File PE Metadata
Compilation timestamp:
1/5/1990 7:18:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
49152:kiODMvxulMGmyqnG8DS47yo3/QEV//W0c1o2PK8hmB8nXdZ30KjQkhVj:6DE9G8m4+m/Q0Tc17PJYB8/30SQu

Entry address:
0x462001

Entry point:
4B, 33, C9, 33, D2, E9, FC, FF, 1F, 00, 00, DD, 43, 2F, BA, 0B, AB, 56, C0, AA, 6A, 28, 37, 97, 78, 2A, AB, C0, 75, 68, 75, 4D, BD, CF, AB, 0A, 56, 73, 76, 98, A7, 7A, 6D, EE, 70, 93, FA, A8, 4D, C4, 45, EB, 75, BB, 46, 60, 2B, 33, 71, 89, AC, 05, FD, EB, 5F, DE, 90, 13, D0, 1D, 35, 58, 17, 19, E3, 6C, B4, 16, D0, A9, CD, BF, DE, 71, 37, D7, 4F, 35, 20, FB, 31, 7D, 57, 08, 84, 1F, 7B, F3, 4A, 17, DD, 9D, CE, D4, AC, E6, 85, 26, 53, 3E, 9E, 03, F4, 51, C1, AD, A1, 48, E1, 2F, 63, B7, 00, 5B, D0, F3, 4B, E2...
 
[+]

Code size:
2 MB (2,075,648 bytes)

The file game37679-2361-torrent.exe has been seen being distributed by the following URL.

https://s83e.storage.yandex.net/rdisk/c2acfb210c8b4612a7111ed4220377aa0d52058cd29c92f53ea0bb9a5c292713/5796ca12/GWSGeT_mZEOv4VVx61K3_uvMrhP1gzW1YZ49d9qAY5If82cFwNZGtTcCwg4mgjD1my1_b9XWkNecEI2vIef4cA==?uid=358720970&filename=game37679-2361-torrent.exe&disposition=attachment&hash=&limit=0&content_type=application/x-msdownload&fsize=2402736&hid=982c300cf6f89e95182036d48bdf7e04&media_type=executable&tknv=v2&etag=85cd0824b6ae59ad1dbbf5da7253ac1b&rtoken=IzwTxKiEAGny&force_default=yes&ycrid=na-82a1e1d38da3c56d216cc98b0b42b301-downloader10e&ts=538809cd92880&s=6cd7be89a9f8ab115800dfdcbb570e087d5132c1bcd90be04a1a1af7af87da6c&bp=/40/.../data-0.8:5549901749:2402736

Remove game37679-2361-torrent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.