home

torrent.exe

Internet Explorer

Consortium ltd.

While the file properties state the file is developed by 'Microsoft Corporation', this is not the case and it is designed just to look like a legitimate Microsoft system file. The application torrent.exe by Consortium ltd has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Microsoft Corporation  (signed by Consortium ltd.)

Product:
Internet Explorer

Version:
11.00.9600.17496 (winblue_r5.141121-1500)

MD5:
3e66171a858c07075ea47207ddb3648d

SHA-1:
e0c13a075943c13af71cc462292fbf2b503a923d

SHA-256:
399e04d1c6b5ed85f49d7548d0b3ea198eedeb662ec294d0d470e9a9caecdceb

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/1/2024 11:22:37 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCube (M)
16.10.24.20

File size:
470.1 KB (481,408 bytes)

Product version:
11.00.9600.17496

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
IEXPLORE.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\torrent.exe

Digital Signature
Signed by:
Consortium ltd.

Authority:
DigiCert Inc

Valid from:
9/17/2014 2:00:00 AM

Valid to:
11/25/2015 1:00:00 PM

Subject:
CN=Consortium ltd., O=Consortium ltd., L=Roseau, S=Commonwealth of Dominica, C=DM

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0B83E660152A40B3C2D469F5C37A69B5

File PE Metadata
Compilation timestamp:
7/19/2015 7:47:36 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:7x5ARbqSj6AmDImva+3Vqckf+ewtWZhwMr:7x5IJO0mvaes+ewtOhwMr

Entry address:
0x55339

Entry point:
55, 8B, EC, 6A, FF, 68, D8, 71, 46, 00, 68, 94, 68, 45, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 1C, 71, 46, 00, 33, D2, 8A, D4, 89, 15, 28, C6, 46, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 24, C6, 46, 00, C1, E1, 08, 03, CA, 89, 0D, 20, C6, 46, 00, C1, E8, 10, A3, 1C, C6, 46, 00, 33, F6, 56, E8, A6, 13, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 71, 10, 00, 00, FF, 15, 3C, 71, 46, 00, A3, 74, DB, 46, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
408 KB (417,792 bytes)

Remove torrent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.