home

freetorrentopener.exe

Honlyn (Macao Commercial Offshore) Limited

The application freetorrentopener.exe by Honlyn (Macao Commercial Offshore) Limited has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Nullsoft Scriptable Install System installer.
Publisher:
Honlyn (Macao Commercial Offshore) Limited  (signed and verified)

MD5:
b91698864e507404a83c1e71756c25c5

SHA-1:
32110514a5606b265a5b5fa171ee5cd81450cd66

SHA-256:
71c52ed982bad85151cfe64ab2cf5d7e6eb6283970e44636fc33b2a7c5aa4ca9

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
5/2/2024 7:29:10 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Optional.HonlynMa.Installer
17.2.7.9

File size:
4.2 MB (4,433,576 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Scriptable Install System

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\low\content.ie5\{random}\freetorrentopener.exe

Digital Signature
Signed by:
Honlyn (Macao Commercial Offshore) Limited

Authority:
Symantec Corporation

Valid from:
9/8/2015 2:00:00 AM

Valid to:
10/8/2017 1:59:59 AM

Subject:
CN=Honlyn (Macao Commercial Offshore) Limited, O=Honlyn (Macao Commercial Offshore) Limited, L=Macau, S=Macau, C=MO

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
4BC4BDE05163DF071B194A0EB664470F

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x30CB

Entry point:
D4, E9, 5D, 25, D0, 35, 71, BA, 4C, D6, 5A, A7, F7, 19, A1, 7D, C9, 41, E8, 27, 4E, 6C, DF, 6B, 02, DD, 91, 20, 94, 89, 88, BA, A6, 2F, 09, FD, 78, 28, 0E, E7, 46, 8C, A0, 33, FB, 86, 38, 2E, BC, 93, 43, DC, 3C, B7, 7D, 02, DD, 8A, 60, 57, 5D, DA, F6, ED, 11, EA, DD, 16, 87, BF, A1, DE, CE, 9A, 7A, 3F, 11, F8, D5, 05, A3, 2C, 44, EC, C7, 17, 82, EE, EA, A8, CE, EE, E7, C1, 69, A1, 5E, 50, 52, 08, A3, 7A, BB, 6A, EA, BD, 20, F0, AB, EC, EC, 5E, 17, F6, 2B, 81, 5F, B8, 86, 5F, A4, 86, 5F, 27, 41, 17, B6, B2...
 
[+]

Code size:
22.5 KB (23,040 bytes)

Remove freetorrentopener.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.