home

torchsetup-r64-n-bi.exe

Torch

Torch Media Inc.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from global-shared-files-l3.softonic.com and multiple other hosts.
Publisher:
Torch Media, Inc  (signed by Torch Media Inc.)

Product:
Torch

Description:
Torch Browser

Version:
29.0.0.4888

MD5:
7be54e0427ddd5eafe1446ecb5919ba3

SHA-1:
829901a9584aa6db8338504aa5272a0c91bb2c2c

SHA-256:
c921fd3581bd7a94c6a132fc0809300f6534433dc0970a5295ed6418ac0e1a17

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/20/2024 12:05:44 AM UTC  (today)

Scan engine
Detection
Engine version

NANO AntiVirus
Trojan.Win32.Downware.crewao
0.28.0.57029

File size:
2.2 MB (2,300,840 bytes)

Product version:
29.0.0.4888

Copyright:
Copyright (C) 2013 Torch Media Inc.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\torchsetup-r64-n-bi.exe

Digital Signature
Signed by:
Torch Media Inc.

Authority:
Thawte, Inc.

Valid from:
6/25/2012 5:00:00 PM

Valid to:
6/26/2014 4:59:59 PM

Subject:
CN=Torch Media Inc., OU=DEV, O=Torch Media Inc., L=Panama, S=Panama, C=PA

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
31FDA315DF1E99651332C713BD3E7B6F

File PE Metadata
Compilation timestamp:
5/30/2013 1:09:15 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:V5VWOQbuSWLMzNXGJ6vf3cvrOSg5mN8QuNHURtyavxRt0UzmMuD:V5VWlu7LMzNsqfqrOSg28jWtyart0JLD

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, BC, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 25, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 80, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 8F, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 7D, 27, 00, 00...
 
[+]

Entropy:
7.9829

Packer / compiler:
Nullsoft install system v2.x

Code size:
29.5 KB (30,208 bytes)

The file torchsetup-r64-n-bi.exe has been seen being distributed by the following 50 URLs.

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140215083133&nva=20140215203233&token=0e568543ba913bf7fffa3&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140903135758&nva=20140904015858&token=0c33ecf6eb300df3017cc&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140807143354&nva=20140808023454&token=0f2d30ef6e16485f0f059&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140729033431&nva=20140729153531&token=0ee744868adad156fc518&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140318124009&nva=20140319004109&token=0dad077ebf61af295617d&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140828201931&nva=20140829082031&token=0f5330ae397dcc12a0de3&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140610173248&nva=20140611053348&token=0be72cb0b764ceec6850f&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140114171250&nva=20140115051350&token=0f25b7ad2ee55541366b1&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140609043549&nva=20140609163649&token=05ff9145aa32c54de2b0d&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140127093545&nva=20140127213645&token=07a5e4eb661947d35fc94&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://download.cdn.torchbrowser.com/cdn/r/.../TorchSetup-r69-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140223114103&nva=20140223234203&token=0e271d2eb4dfde411b4be&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140331121749&nva=20140401001849&token=0a0d56fb1bcf19a9a0438&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://store.jazeeratelecom.net:8080/index.php?do=download&id=360

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140829173947&nva=20140830054047&token=091e7d39ab5c288513fb5&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140918144341&nva=20140919024441&token=01dc6078e25fb51f7c11a&instance=softonic_en&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140911133548&nva=20140912013648&token=0baec3b137be9ef873430&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140815070257&nva=20140815190357&token=0270ebc8a7c59bdea08f4&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140825103021&nva=20140825223121&token=0c144dd05ec2ddd8b6e1c&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140201173552&nva=20140202053652&token=04dfd84d19e4201e1f6fc&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140331124812&nva=20140401004912&token=0462293d66f750f55d4d9&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140717060054&nva=20140717180154&token=0d86d853ca4b40b14451d&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140904075019&nva=20140904195119&token=0bbd8c9978b26ebd8af1c&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140918002532&nva=20140918122632&token=0a8c3fc6e474360b04a3d&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140907084430&nva=20140907204530&token=07cee30294aa18db051c6&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140907060724&nva=20140907180824&token=038e480a461c9cdecec9e&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140808042742&nva=20140808162842&token=082b8edc5c6d5902f2528&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140522062917&nva=20140522183017&token=0172a4dae59572a997154&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

http://toolboox.com/.../torch-browser.exe

http://global-shared-files-l3.softonic.com/829/901/.../file?nvb=20140522190214&nva=20140523070314&token=0268af9e214e0ae2703c1&id_file=3347410&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=TorchSetup-r81-n-bf.exe

Latest 30 of 60 download URLs

Scan torchsetup-r64-n-bi.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.