home

freetorrentopener.exe

The program is a setup application that uses the Nullsoft Scriptable Install System installer. The file has been seen being downloaded from www.freetorrentviewer.com.
MD5:
299204b380354343204368a5def4646e

SHA-1:
a823ce24a621e9800fe9cb8d6bcec300177e7728

SHA-256:
a91486da4147915ad49fcbd5ab3cb9c921174d574a0a0667f770819c09d0e612

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 2:35:23 AM UTC  (today)

File size:
4.1 MB (4,301,376 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Scriptable Install System

File PE Metadata
Compilation timestamp:
12/6/2009 6:50:41 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:UgCvQkrwBBJkypcekOtdjx+ehwyrEgN7upBgIaYMpste0dEgzNudVp:mvQk4BedeNtdjx+eiyAgyBgIa5sI05zA

Entry address:
0x30CB

Entry point:
FF, CA, F6, C5, 36, 68, EF, 4D, 8A, 00, 3D, D0, 23, 00, 00, 76, 02, 21, EA, 80, F4, 75, FF, CB, 69, F2, AB, B4, 7F, DA, F2, 0F, AF, EB, 35, 6F, 64, 2A, 54, B8, B2, A1, A2, 6F, 81, EF, 80, 1F, 00, 00, 84, DC, FF, C1, 81, EF, E4, 07, 00, 00, 87, F3, 69, D1, C4, C1, B2, AF, FF, C2, 86, C2, B2, 3F, F3, 69, FA, BF, 06, A5, E8, 8A, D7, E8, 16, 00, 00, 00, 84, DB, C6, C1, 48, BB, 3B, 81, 16, CE, BB, 4C, 25, BF, 2D, 0F, AF, DD, 86, D2, 3B, C3, 80, DD, A6, 85, ED, F6, C1, DF, 81, C7, DE, D6, 00, 00, 12, E5, 87, C9...
 
[+]

Entropy:
7.9972  (probably packed)

Code size:
22.5 KB (23,040 bytes)

The file freetorrentopener.exe has been seen being distributed by the following URL.

http://www.freetorrentviewer.com/download.php

Scan freetorrentopener.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.