home

l2ep2.torrent.exe

MD5:
cc29b7b7d8583d8253009a969ed08997

SHA-1:
7f6829cad53b379e11b24483708b07d28a5830cc

SHA-256:
123b5ceb2e33ecd3b34a18c47289eb14cabcf1c5f553cc8d45bbe8e470c18be2

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/29/2024 6:03:37 PM UTC  (today)

Scan engine
Detection
Engine version

ViRobot
Trojan.Win32.A.Krap.5710848[h]
2014.3.20.0

File size:
5.4 MB (5,710,848 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\l2ep2.torrent.exe

File PE Metadata
Compilation timestamp:
12/8/2011 3:55:56 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:COBlIW5DokWwx9sCrcS/Xwme2IpP/8A0j0:sUck1bBwWgmeTiAn

Entry address:
0x16A8

Entry point:
EB, 10, 66, 62, 3A, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, 98, 30, 92, 00, A1, 8B, 30, 92, 00, C1, E0, 02, A3, 8F, 30, 92, 00, 52, 6A, 00, E8, CB, FF, 11, 00, 8B, D0, E8, 6E, 0C, 10, 00, 5A, E8, CC, 0B, 10, 00, E8, A3, 0C, 10, 00, 6A, 00, E8, D8, 20, 10, 00, 59, 68, 34, 30, 92, 00, 6A, 00, E8, A5, FF, 11, 00, A3, 93, 30, 92, 00, 6A, 00, E9, 03, 78, 10, 00, E9, 06, 21, 10, 00, 33, C0, A0, 7D, 30, 92, 00, C3, A1, 93, 30, 92, 00, C3, 60, BB, 00, 50, B0, BC, 53, 68, AD, 0B, 00, 00, C3, B9, CC, 00, 00, 00, 0B, C9...
 
[+]

Entropy:
6.9215

Code size:
1.1 MB (1,187,840 bytes)

The file l2ep2.torrent.exe has been seen being distributed by the following 17 URLs.

http://dl0.dler.org/d399f91b63f1ebc05864e7e43577ec89/v/0075/.../L2EP2.torrent.exe

http://dl0.dler.org/683ca3658b82ab88961500afbdcab006/v/0075/.../L2EP2.torrent.exe

http://dl0.dler.org/435718203c69d19d9f6550030c35df17/v/0075/.../L2EP2.torrent.exe

http://dl0.dler.org/869f467a2b2e68243d2a13115e4c6523/v/0075/.../L2EP2.torrent.exe

http://dl0.dler.org/72785e7d7d86ad45a8436770c22de611/v/0075/.../L2EP2.torrent.exe

http://dl0.dler.org/80a29dc936df10ce7df334879ea7f035/v/0075/.../L2EP2.torrent.exe

http://dl0.dler.org/9401c525dfba67784675fc9d480ef7d8/v/0075/.../L2EP2.torrent.exe

http://dl0.dler.org/3c7aa401ea5b3faf3558416c0e5bde1f/v/0075/.../L2EP2.torrent.exe

http://dl0.dler.org/d5ae3d82145cdfce2e9e2c5c9efbbc4b/v/0075/.../L2EP2.torrent.exe

http://dl0.dler.org/f5ea6757a1a5f2973180558913ebc624/v/0075/.../L2EP2.torrent.exe

http://dl02.dler.org//v/0075/.../L2EP2.torrent.exe

http://dl0.dler.org/988dfdf63c1e81f6ecd6bdd1689743ef/v/0075/.../L2EP2.torrent.exe

http://dl0.dler.org/6d62f3a60fd002b6861833b852e39b48/v/0075/.../L2EP2.torrent.exe

http://dl0.dler.org/d886a10a82ad11dc404387830b69f213/v/0075/.../L2EP2.torrent.exe

http://dl0.dler.org/bc4a6f6722aaed24046d7c9a8da574ca/v/0075/.../L2EP2.torrent.exe

http://dl0.dler.org/f2d9c1e7ecd0d9958422c8f90134aa3c/v/0075/.../L2EP2.torrent.exe

http://dl0.dler.org/0bcd64a99d67998fa751045f6c639f72/v/0075/.../L2EP2.torrent.exe

Scan l2ep2.torrent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.