home

torchsetup-r259-n-bi.exe

Torch

Torch Media Inc.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from mega.nz and multiple other hosts.
Publisher:
Torch Media, Inc  (signed by Torch Media Inc.)

Product:
Torch

Description:
Torch Browser

Version:
45.0.0.11172

MD5:
371b89ffd2ee8efa6b39f8ffa6cf2b91

SHA-1:
5e4f4699213d22e78ac77e6fad79129ddf6f7f7b

SHA-256:
9ed7f5707ae6229e7a4f44d1ff3541762d81bdbbc25c2b47affe8bf2b2ee3b19

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:51:18 AM UTC  (today)

File size:
1.6 MB (1,667,792 bytes)

Product version:
45.0.0.11172

Copyright:
Copyright (C) 2014 Torch Media Inc.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\torchsetup-r259-n-bi.exe

Digital Signature
Signed by:
Torch Media Inc.

Authority:
thawte, Inc.

Valid from:
10/25/2015 5:00:00 PM

Valid to:
6/25/2016 4:59:59 PM

Subject:
CN=Torch Media Inc., OU=DEV, O=Torch Media Inc., L=Panama, S=Panama, C=PA

Issuer:
CN=thawte SHA256 Code Signing CA - G2, O="thawte, Inc.", C=US

Serial number:
5821499C775314DC773DE210C0E1B8FB

File PE Metadata
Compilation timestamp:
2/24/2012 11:20:04 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:f2Plq8zIjHNvl2TUHIfN1P/C3AmDRoVopd:f2Pz0jHN92AoFlIDRoyd

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Entropy:
7.9742

Packer / compiler:
Nullsoft install system v2.x

Code size:
29 KB (29,696 bytes)

The file torchsetup-r259-n-bi.exe has been seen being distributed by the following 44 URLs.

https://mega.nz/temporary/.../ONExmLSS

http://download1706.mediafire.com/ndc3d4c7t48g/.../TorchSetup-r0-n-bf.exe

http://www.techspot.com/downloads/downloadnow/.../?evp=e1dbf38fc832a3d574868dc938cd42ce&file=1

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/.../TorchSetup-r0-n-bf.exe

http://www.techtudo.com.br/_/software/.../download

http://www.techspot.com/downloads/downloadnow/.../?evp=3115be3dc4f0f02c34329181d024cb49&file=1

http://www.jetelecharge.com/.../tel.php?id=6747

http://dl.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r21-n-bc.exe

http://dl.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r215-n-bc.exe

http://download.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r93-n-bi.exe

http://indir.gezginler.net/i/18096/.../

http://www.newclearchuckle.com/c?x=s1dar8/ER gjYnAZuuwsYb3qHxbfgqXq2HbhB5pab4c=&c=uoAgoI9jMvivcLggr4cXcQXgmpmbiv2XDk4npcua3ehCLfPD7/7yJbYPA2Lbx/MecEw/WAfaulosUFZWGEjnsQ48Fh2TRMWhfu9XNom7XlOssBnbAh8/1A3x1HoKAxKr7zUF6URKbjSVnzwV7mIgAA==&e=0&downloadAs=ilivid_download_manager.exe&fallback_url=http://ilivid_download_manager.en.downloadastro.com/.../?utm_source=ira&utm_medium=error_generating&utm_campaign=ilivid_download_manager

http://dl.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r32-n-bc.exe

http://dl.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r107-n-bc.exe

http://download.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r275-n-bi.exe

http://download.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r160-n-bi.exe

http://download.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r20-n-bf.exe

http://download.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r25-n-bf.exe

http://dl.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r64-n-bc.exe

http://dl.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r479-n-bc.exe

http://download.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r62-n-bi.exe

http://dl3.vessoft.com/files2/t/torchbrowser_windows/45.0.0.11172/.../TorchSetup-r807-n-bc.exe

http://indir.gezginler.net/i/18096/.../

http://download.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r807-n-bf.exe

http://download.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r0-n-bf.exe

http://120.52.73.12/.../TorchSetup.exe

http://dl.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r258-n-bc.exe

http://download1.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r22-n-bc.exe

http://download.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r21-n-bi.exe

http://dl.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r0-n-bc.exe

Latest 30 of 44 download URLs

Scan torchsetup-r259-n-bi.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.