» bittorrentanonymizer.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

bittorrentanonymizer.exe

Interweb LLC

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘BittorrentAnonymizer.exe’. This is installed with Torrent Privacy.

File name:

Publisher:

TorrentPrivacy (signed by Interweb LLC)

Product:

TorrentPrivacy

Version:

4.0.9.0

MD5:

2a71b1949d60287c061f3b72626e452b

SHA-1:

8f19b5aea083b0f4373be00d0c879255243cb311

SHA-256:

58c42d0911411b90fbbef0f82a76d5bcaae0bc40488df632939f49e65ffb349a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 3:44:36 PM UTC (today)

File size:

7.1 MB (7,420,448 bytes)

Product version:

4.0.9.0

Original file name:

ConnectionManager.exe

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Common path:

C:\Program Files\torrent privacy\bittorrentanonymizer.exe

Digital Signature

Signed by:

Interweb LLC

Authority:

Thawte, Inc.

Valid from:

2/14/2013 6:00:00 PM

Valid to:

2/15/2014 5:59:59 PM

Subject:

CN=Interweb LLC, O=Interweb LLC, L=Tomsk, S=Tomsk Region, C=RU

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

4B871640E7C968FD06E412C922CDC2C0

File PE Metadata

Compilation timestamp:

1/17/2014 3:08:56 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

98304:j+MqAYXNb4zwDLP8DnPRDQIfCEqSpxaeJJJJJJJJJJJJJJJJJJJJJJJDJJJ+JJJw:6MuXSzw9HTa

Entry address:

0xA5F7C

Entry point:

48, 83, EC, 28, E8, 5F, 04, 00, 00, 48, 83, C4, 28, E9, 26, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, 89, 90, 06, 00, 75, 11, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 02, F3, C3, 48, C1, C9, 10, E9, D9, 04, 00, 00, CC, FF, 25, 5A, 99, 01, 00, FF, 25, 74, 99, 01, 00, 48, 89, 5C, 24, 10, 44, 89, 44, 24, 18, 48, 89, 4C, 24, 08, 56, 57, 41, 54, 48, 83, EC, 40, 49, 8B, F1, 41, 8B, F8, 4C, 8B, E2, 48, 8B, D9, FF, CF, 89, 7C, 24, 70, 78, 0F, 49, 2B, DC, 48, 89... 
[+]

Entropy:

6.2763

Code size:

757 KB (775,168 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

BittorrentAnonymizer.exe

Command:

"C:\Program Files\torrent privacy\bittorrentanonymizer.exe"

The file bittorrentanonymizer.exe has been discovered within the following program.

Torrent Privacy by TorrentPrivacy

About 2% of users remove it

Scan bittorrentanonymizer.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.