home

torrent_34474-torrent.exe

Amulet

The application torrent_34474-torrent.exe by Amulet has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from downloader.disk.yandex.ru.
Publisher:
Amulet  (signed and verified)

MD5:
28809113ef130628f33cf3b2bbc662a1

SHA-1:
4a620ae2c2c177e48ad62d3f754799919298b6c6

SHA-256:
6639da7fb8b8a4a2874652b3334d25137c645fe82c5112d394aae6eb4209164a

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/26/2024 12:39:36 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.FileTour (M)
17.2.26.4

File size:
1.6 MB (1,641,888 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\torrent_34474-torrent.exe

Digital Signature
Signed by:
Amulet

Authority:
COMODO CA Limited

Valid from:
12/18/2015 4:00:00 AM

Valid to:
12/18/2016 3:59:59 AM

Subject:
CN=Amulet, O=Amulet, POBox=127015, STREET="Vyatskaya, 70, pom.1", L=Moscow, S=Moscow state, PostalCode=127015, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B48E86D275ECE7BFC0A62B206428EDAC

File PE Metadata
Compilation timestamp:
6/20/1992 2:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x100F

Entry point:
E9, 5E, 17, 00, 00, 05, ED, 4A, 89, 11, E9, D8, 0C, 00, 00, 87, 97, B0, 8D, 64, 24, 04, E9, CE, 03, 00, 00, E7, CF, 93, FF, E0, E9, CA, 18, 00, 00, FB, FF, E1, E9, 4C, 0F, 00, 00, 4D, 68, 0F, C0, 2A, 54, 9C, 81, 6C, 24, 04, 2E, A1, EA, 53, 9D, C3, 4C, 8D, 64, 24, 04, E9, 9C, 10, 00, 00, 18, B8, 94, DD, 70, 00, 68, F6, 5B, 03, F4, 9C, 81, 6C, 24, 04, 5C, 3C, C3, F3, 9D, C3, 91, CF, B8, DC, AB, 33, 01, EB, 3D, C2, 1F, 0F, BE, 00, 68, 43, 11, 40, 00, C3, C4, 56, FF, E0, E9, 24, 18, 00, 00, AE, 63, EF, 8B, 54...
 
[+]

Packer / compiler:
Xtreme-Protector v1.05

Code size:
885.5 KB (906,752 bytes)

The file torrent_34474-torrent.exe has been seen being distributed by the following URL.

https://downloader.disk.yandex.ru/disk/71cbad189700d47bc4dfd79a8ccdc79fd79ad7f28b3bfdba8ad9a9d0605036da/5757db19/.../x-msdownload&fsize=1641888&hid=78776eb1898914091c21b103bfa3b2d9&media_type=executable&tknv=v2&etag=28809113ef130628f33cf3b2bbc662a1

Remove torrent_34474-torrent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.