home

utorrent-3-4-6-build-42178.exe

µTorrent

BitTorrent Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from utorrent.ar.softonic.com.
Publisher:
BitTorrent Inc.

Product:
µTorrent

Version:
3.4.6.42178

MD5:
1603efa3261236c2c6944741ab91bfcf

SHA-1:
fa0be5ebffe6c39361d1fbe5740800c523fbe71a

SHA-256:
e3fe895c713e2f767fe10b3cfdb51b0e00c2b46693bd0d96ee75280744d6a65b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 7:51:48 PM UTC  (today)

File size:
1.9 MB (2,038,272 bytes)

Product version:
3.4.6.42178

Copyright:
©2016 BitTorrent, Inc. All Rights Reserved.

Original file name:
uTorrent.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\utorrent-3-4-6-build-42178.exe

File PE Metadata
Compilation timestamp:
4/5/2016 11:44:02 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
24576:kN5fNg9Fe64G+0yxotvgEkM29DXzj/0QKeEyRIfMzCVZZU/Bx7TvT/XUthjQRVjv:OfNss64G+/gC/AfMK4vXvTELlXD1ouK

Entry address:
0x4EBF60

Entry point:
8D, 1D, 76, BF, 96, 24, 0F, AF, DF, 88, F3, 68, BA, B1, 59, 00, 55, F2, 85, EB, 70, 03, 0F, B7, F6, 73, 04, 85, E9, 88, E7, 21, D1, 77, 09, B9, 63, 93, E3, B9, 10, FD, B6, 01, 4B, B9, 35, 65, 45, C6, 87, CA, 8D, 3E, 49, 0F, AF, D8, 15, 8C, 36, 06, 9D, 8D, 37, 15, 7A, F1, 22, 32, 8B, C0, EB, 0D, 00, F9, 69, D8, F5, C7, 49, AF, BA, 2B, C7, C8, 0A, 2B, EE, 85, D1, 73, 05, 25, 54, 6E, 6A, 6E, 86, E9, 15, F0, 70, 16, 8A, 68, 40, FB, E0, 00, 70, 08, 69, CA, E6, 3A, 28, 15, FF, CA, B7, 1E, 8A, DE, 50, 0F, BE, ED...
 
[+]

Entropy:
7.9845  (probably packed)

Code size:
1.7 MB (1,822,720 bytes)

The file utorrent-3-4-6-build-42178.exe has been seen being distributed by the following URL.

http://utorrent.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm5-IpaCmlJY=

Scan utorrent-3-4-6-build-42178.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.