[eli]

Looks like this piece of Windows malware: https://malwr.com/analysis/NDI4YmUxNjM0ZTUwNDY0OWFhNjM3YzFiZ...

It uses a data file called AF.dat and connect to bittorrent.

[lcrs]

Aha, the long .torrent file it drops matches the magnet link too. The MD5 of AF.dat from that page doesn't match what I've got but maybe it gets modified...