home

torrent.exe

Fusion Install

The application torrent.exe, “Fusion Install ” has been detected as a potentially unwanted program by 35 anti-malware scanners. This program installs potentially unwanted software on your PC at the same time as the software you are trying to install, without adequate consent. The file has been seen being downloaded from stage.traffiliate.com.
Publisher:
Fusion Install

Product:
Fusion Install

Description:
Fusion Install

Version:
2.4.8.1

MD5:
8e73cf021d9ffe494bd08f2047924f22

SHA-1:
6f4fcb8f01adaa31e0079fa7e9f246190c119818

SHA-256:
043dbf37c37eaf415cc2f930d857917c6d2e39d0149feb4fee5e43fa9b1dfa4c

Scanner detections:
35 / 68

Status:
Potentially unwanted

Analysis date:
4/27/2024 3:46:34 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Application.Bundler.OptimumInstaller.3
5693959

Agnitum Outpost
PUA.Downloader
7.1.1

AhnLab V3 Security
PUP/Win32.IBryte
2015.04.12

avast!
Win32:PUP-gen [PUP]
150319-1

AVG
Win.Threat.Medium
2014.0.4311

Bitdefender
Gen:Variant.Application.Bundler.OptimumInstaller.3
1.0.20.505

Clam AntiVirus
Win.Trojan.Agent-723412
0.98/21511

Comodo Security
Application.Win32.IBryte.S
21731

Dr.Web
Adware.Downware.2249
9.0.1.05190

Emsisoft Anti-Malware
Gen:Variant.Application.Bundler.OptimumInstaller
9.0.0.4799

ESET NOD32
Win32/AdWare.iBryte.AM application
7.0.302.0

Fortinet FortiGate
Riskware/Generic.AC.13751
4/11/2015

F-Prot
W32/A-8407ca21
v6.4.7.1.166

F-Secure
Riskware.Gen:Variant.Application.Bundler
5.13.68

G Data
Gen:Variant.Application.Bundler.OptimumInstaller
15.4.25

herdProtect (fuzzy)
variant of update.exe
2015.7.14.10

IKARUS anti.virus
not-a-virus:Downloader.Win32.Agent
t3scan.1.8.9.0

K7 AntiVirus
Unwanted-Program
13.176.11595

Kaspersky
not-a-virus:Downloader.Win32.Agent
14.0.0.2205

Malwarebytes
PUP.Optional.OptimumInstaller.A
v2015.04.11.10

McAfee
Artemis!9F3D6B19E1FF
5600.6705

MicroWorld eScan
Gen:Variant.Application.Bundler.OptimumInstaller.3
16.0.0.303

NANO AntiVirus
Trojan.Win32.Downware.cukphe
0.28.0.58720

Norman
Downloader
11.20150411

nProtect
Trojan-Clicker/W32.iBryte.220160
15.04.10.01

Panda Antivirus
Trj/Genetic.gen
15.04.11.10

Quick Heal
Adware.iBryte.DK4
4.15.14.00

Reason Heuristics
Threat.Win.Reputation.IMP
15.4.11.17

Rising Antivirus
PE:Malware.iBryte!6.14B5
23.00.65.15409

Sophos
iBryte Optimum Installer
4.98

SUPERAntiSpyware
PUP.OptimumInstaller/Variant
9941

Trend Micro House Call
TROJ_GEN.F47V0310
7.2.195

Vba32 AntiVirus
Downloader.Agent.bkfx
3.12.26.3

VIPRE Antivirus
Threat.4150696
38950

Zillya! Antivirus
Downloader.Agent.Win32.185033
2.0.0.2135

File size:
215 KB (220,160 bytes)

Product version:
2.4.8.1

Copyright:
Copyright (C) 2013 Fusion Install

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\torrent.exe

File PE Metadata
Compilation timestamp:
3/10/2014 5:13:24 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:Pnd9i/2pT0bT3GJJiEnJqQNKDCFVo6O9muc7JKWPZ56npMo1:PndE/yT0PqnJbbhO0ugP+npMo1

Entry address:
0xE1FB

Entry point:
E8, CC, 47, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, A4, 82, 42, 00, 8D, 7D, E0, F3, A5, 89, 45, F8, 8B, 45, 0C, 5F, 89, 45, FC, 5E, 85, C0, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, 5C, 80, 42, 00, C9, C2, 08, 00, 8B, FF, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00, 8B, 03, 64, A3, 00, 00, 00, 00, 8B, 45, 08, 8B, 5D, 0C, 8B, 6D, FC, 8B, 63...
 
[+]

Entropy:
6.3524

Code size:
156 KB (159,744 bytes)

The file torrent.exe has been seen being distributed by the following URL.

http://stage.traffiliate.com/TrafficCop.aspx?CampaignUid=d44d71adca03b44c&SourceId=773&CreativeId=715798&LineItemId=103868&PublisherId=1018&Site ID=-2201500611410762943&partner_var=Ym89NCZjaXBpZD00MDcwMDAmY2lzaWQ9NURFNjQzOEUzMzc1NDExNDAxMDgwMTYzJmNpcmlkPTVERTY0MzhFMzM3NTQxMjE4NDQ5NTA3NjUmc2xpZD0yNjI4JnN1YmlkPTIyMTQ1OCZjaXVpZD0tNzU0NTY5MjI5OTE5ODI3NTU4NiZzbz00JmNyaWQ9NzE1Nzk4JmV4Y2lkPTIyJm1tdD0tMSZjbnRyeT0yMjcmY2ljbXA9MTAzODY4JnB1YmlkPTEwMTg=

Remove torrent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.