home

game37679-9549-torrent.exe

Amulet

The application game37679-9549-torrent.exe by Amulet has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from downloader.disk.yandex.ru.
Publisher:
Amulet  (signed and verified)

MD5:
c3f743dd6b8c483cac2d15630874f2f2

SHA-1:
741249e590a3d22c78fd2abb9ca35cda93c70f94

SHA-256:
70f22bde9815fc674f8f3973519add374ca1770718d8c521261bd3147c3943d8

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/24/2024 1:44:31 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.FileTour (M)
17.3.10.9

File size:
1.8 MB (1,844,720 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\game37679-9549-torrent.exe

Digital Signature
Signed by:
Amulet

Authority:
COMODO CA Limited

Valid from:
12/18/2015 3:00:00 AM

Valid to:
12/18/2016 2:59:59 AM

Subject:
CN=Amulet, O=Amulet, POBox=127015, STREET="Vyatskaya, 70, pom.1", L=Moscow, S=Moscow state, PostalCode=127015, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B48E86D275ECE7BFC0A62B206428EDAC

File PE Metadata
Compilation timestamp:
12/8/2013 11:30:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

Entry address:
0x24F008

Entry point:
73, 05, 33, D2, 0F, AF, D0, E9, 1D, 19, 00, 00, 79, 54, 64, FF, 35, 00, 00, 00, 00, 68, B0, 01, 65, 00, 9C, FF, 44, 24, 04, 9D, C3, D6, 68, EB, F0, 64, 00, 9C, FF, 44, 24, 04, 9D, C3, D0, D2, 6D, 50, 68, 0F, 23, CF, 79, 9C, 81, 6C, 24, 04, 38, 1E, 6A, 79, 9D, C3, 3D, 68, 79, F2, 64, 00, 9C, FF, 4C, 24, 04, 9D, C3, 4C, FF, E0, E9, 56, 0E, 00, 00, 0F, 51, B1, B9, CD, 6E, A0, FF, E9, 80, 1D, 00, 00, 54, B8, 27, 7D, D2, FF, EB, 50, AF, 81, EA, 1A, 11, 0A, 00, 68, 5A, 0F, 65, 00, C3, B1, E9, 79, 01, 00, 00, AC...
 
[+]

Code size:
1.2 MB (1,224,704 bytes)

The file game37679-9549-torrent.exe has been seen being distributed by the following URL.

https://downloader.disk.yandex.ru/disk/183575343ba766757eadaaa2bd610fb753dcf34df2aac2f060eb653ab3d6e18b/573c9425/.../x-msdownload&fsize=1844720&hid=53bc1b28b30b82791b874fa9c50660dc&media_type=executable&tknv=v2&etag=c3f743dd6b8c483cac2d15630874f2f2

Remove game37679-9549-torrent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.