» utorrent-3-4-6-build-42178.exe
Overview
Analysis
File Details
Downloads (1)

utorrent-3-4-6-build-42178.exe

µTorrent

BitTorrent Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from utorrent.ro.softonic.com.

File name:

Publisher:

BitTorrent Inc.

Product:

µTorrent

Version:

3.4.6.42178

MD5:

8ba5073b7241a355844912d0f760076a

SHA-1:

2019e7267d9ef476164d00b955219a6067edf08a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/5/2024 5:45:36 AM UTC (today)

File size:

1.9 MB (2,034,176 bytes)

Product version:

3.4.6.42178

Original file name:

uTorrent.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

File PE Metadata

Compilation timestamp:

4/6/2016 12:44:02 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

24576:nN5fNg9Fe64G+0yxotvgEkM29DXzj/0QKeEyRIfMzCVZZU/Bx7TvT/XUthjQRVjK:DfNss64G+/gC/AfMK4vXvTELlXD1oDS

Entry address:

0x4EBF60

Entry point:

47, 8A, DF, 80, E7, E4, 89, F6, 14, 95, F7, C6, A0, 43, B8, C8, 0D, D8, 64, 67, AA, 21, D5, B5, 8E, 69, C5, 54, 1F, 78, 11, 8D, 0D, D3, 01, 22, 69, B5, 72, 1B, D3, F3, F2, 8D, 7D, 00, 8D, 05, D0, 5C, D8, 77, 89, DA, 81, C3, E6, 1F, BA, 10, FE, C7, 57, 86, E3, B2, B4, 5E, 0F, AF, DB, 84, F0, 39, C5, FF, CF, 14, C0, 68, 85, 0D, 4A, 00, 89, DB, 69, C9, 4A, 36, 54, C3, FE, C1, 85, C7, 75, 0A, 2B, D9, 87, C6, 81, C1, 5C, 1F, 9F, EB, 80, CE, 60, E8, 00, 00, 00, 00, C6, C1, 38, 87, CD, 0F, BE, C6, 8D, 3D, ED, D5... 
[+]

Entropy:

7.9844 (probably packed)

Code size:

1.7 MB (1,822,720 bytes)

The file utorrent-3-4-6-build-42178.exe has been seen being distributed by the following URL.

http://utorrent.ro.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm5-MpJ6kmZw=

Scan utorrent-3-4-6-build-42178.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.