home

BittorrentAnonymizer.exe

Interweb LLC

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘BittorrentAnonymizer.exe’. This is installed with Torrent Privacy.
Publisher:
TorrentPrivacy  (signed by Interweb LLC)

Product:
TorrentPrivacy

Version:
4.0.10.0

MD5:
3d40233bdf5e4bfb32cde512f01060e3

SHA-1:
185097b27f0589f682cd52aa0ff7edfc9d61a762

SHA-256:
0b697538fde94fd2cb33ee7d3b44601aef4b7b06f563587cc488ea26c7bfe027

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 2:28:37 PM UTC  (today)

File size:
7.1 MB (7,420,960 bytes)

Product version:
4.0.10.0

Copyright:
(c) TorrentPrivacy. All rights reserved.

Original file name:
BittorrentAnonymizer.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\torrent privacy\bittorrentanonymizer.exe

Digital Signature
Signed by:
Interweb LLC

Authority:
Thawte, Inc.

Valid from:
2/6/2014 7:00:00 PM

Valid to:
2/15/2015 6:59:59 PM

Subject:
CN=Interweb LLC, O=Interweb LLC, L=Tomsk, S=Tomsk Region, C=RU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1FD560C5CCA1FC31CC5F7BD1B4CB06B1

File PE Metadata
Compilation timestamp:
3/12/2014 2:37:45 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:uNMVtQCp+Nb4zwDLP8DnPRDQIfCEqSpxaeJJJJJJJJJJJJJJJJJJJJJJJDJJJ+J8:dVtX+Szw9HTu

Entry address:
0xA611C

Entry point:
48, 83, EC, 28, E8, 5F, 04, 00, 00, 48, 83, C4, 28, E9, 26, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, E9, 8E, 06, 00, 75, 11, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 02, F3, C3, 48, C1, C9, 10, E9, D9, 04, 00, 00, CC, FF, 25, BA, 97, 01, 00, FF, 25, D4, 97, 01, 00, 48, 89, 5C, 24, 10, 44, 89, 44, 24, 18, 48, 89, 4C, 24, 08, 56, 57, 41, 54, 48, 83, EC, 40, 49, 8B, F1, 41, 8B, F8, 4C, 8B, E2, 48, 8B, D9, FF, CF, 89, 7C, 24, 70, 78, 0F, 49, 2B, DC, 48, 89...
 
[+]

Entropy:
6.2761

Code size:
757.5 KB (775,680 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
BittorrentAnonymizer.exe

Command:
"C:\Program Files\torrent privacy\bittorrentanonymizer.exe"


The file BittorrentAnonymizer.exe has been discovered within the following program.

Torrent Privacy  by TorrentPrivacy
About 2% of users remove it
 
Powered by Should I Remove It?

Scan BittorrentAnonymizer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.