home

utorrent 1.8.1 _invert.exe

µTorrent

BitTorrent, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from mail.yandex.ru.
Publisher:
BitTorrent, Inc.

Product:
µTorrent

Version:
1.8.1.12616

MD5:
d813b2ac0086d32e75fd175bac7823b4

SHA-1:
ee40685544995962fc99e1d5b190bd26184755c4

SHA-256:
820ec2a7e78bf3420d3452a097082ee21ca2ce437dfb30cd78d7fe29efba83ca

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:26:39 PM UTC  (today)

File size:
264.8 KB (271,152 bytes)

Copyright:
©2008 BitTorrent, Inc. All Rights Reserved.

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\seba14mods\µtorrent 1.8.1 (build 12616) leecher pack\utorrent 1.8.1 _invert.exe

File PE Metadata
Compilation timestamp:
10/7/2008 1:13:47 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:o/wRMop6+YyVBwY2Vw3FfhQfpe01nnhdzpljUmPDqsdwgZJ:ewRJFHBw2FQtn/plbFdwS

Entry address:
0x1000

Entry point:
B8, A4, 1D, 4A, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 61, 8A, 0E, 59, 8D, 56, B0, 57, 8F, 8F, 95, 65, BB, C1, FD, C2, EE, 62, F8, 1A, 2C, B4, 27, 9D, EA, AD, 90, 62, B7, A7, 7A, 7B, EF, BD, BA, 26, 8A, 60, 46, 66, 76, 6C, DA, 5A, 55, 99, 41, 5C, CB, 65, 61, 77, 86, 9C, E8, 66, D8, 00, 65, E8, C9, F9, A3, F9, 82, D7, EF, 3B, 71, 59, 46, D5, 97, E6, A8, 1D, 65, A0, 04, 5B, 8D, 24, 88, 22, F5, 1C, 96, 36, 8C, 93, 33, FB, 09...
 
[+]

Packer / compiler:
PECompact v2

Code size:
356 KB (364,544 bytes)

The file utorrent 1.8.1 _invert.exe has been seen being distributed by the following URL.

https://mail.yandex.ru/.../utorrent 1.8.1 (12616)_invert.exe

Scan utorrent 1.8.1 _invert.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.