home

uTorrent.exe

µTorrent

BitTorrent, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from ll.download3.utorrent.com.
Publisher:
BitTorrent, Inc.

Product:
µTorrent

Version:
3.2.2.28595

MD5:
550f5842c60a96782ceae5e6f7926520

SHA-1:
318d29a255da708607ede3f72e376824d5d78f23

SHA-256:
82a3d3c3ca4045349ae05e7f3e9fa97fdf4a2cd5abf0985305b7f9e9809b9b36

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 9:29:29 AM UTC  (today)

File size:
1021.9 KB (1,046,416 bytes)

Product version:
3.2.2.28595

Copyright:
©2012 BitTorrent, Inc. All Rights Reserved.

Original file name:
uTorrent.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\utorrent.exe

File PE Metadata
Compilation timestamp:
11/22/2012 4:02:33 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:p+apWlumRZC+q2PzQRX9/zj7GxtXXGwECj9CZTY:p+cW8Yl8RX9jyLHhAY

Entry address:
0x533DC0

Entry point:
60, 70, 04, 85, CE, 3B, CB, 8B, C8, 69, C1, B8, 95, 41, F8, 71, 02, FE, CF, 01, D8, 69, DF, 10, 09, 32, 31, F7, C0, 88, 56, D1, BA, FE, C5, BA, AC, 4D, 6B, EB, 81, C6, 42, 1E, 00, 00, 69, D9, B6, 18, C1, F1, 81, EE, 33, 05, 00, 00, F6, C2, 42, EB, 01, 45, EB, 03, 0F, AF, C9, 55, 68, 77, 99, A3, 00, 86, C8, C6, C0, A6, 4D, E8, 00, 00, 00, 00, 5F, F7, C6, B1, 70, BD, 51, 29, EB, 0F, BF, EF, 69, C6, 9A, EC, 8F, BD, 86, C4, 80, F0, 45, BB, 9B, 67, 7C, 78, 8B, C6, 89, D6, 55, B2, C7, FE, C0, 59, 85, FF, 81, FD...
 
[+]

Entropy:
7.7640  (probably packed)

Code size:
696 KB (712,704 bytes)

The file uTorrent.exe has been seen being distributed by the following URL.

http://ll.download3.utorrent.com/.../uTorrent.exe

Scan uTorrent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.