home

uTorrent.exe

µTorrent

BitTorrent Inc

µTorrent is a free ad-supported lightweight BitTorrent client. This is a setup program which is used to install the application. It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘uTorrent’. The file has been seen being downloaded from dpcdn-s03q.pl and multiple other hosts.
Publisher:
BitTorrent Inc.  (signed by BitTorrent Inc)

Product:
µTorrent

Version:
3.4.6.42042

MD5:
c6af4658b6d7898f6faa1d704f1cfb59

SHA-1:
3b3ff8cebf04867495a5aa8914787264e8f5ae99

SHA-256:
4a58c4388c95f5ac8cf1ec63f2588c35454abf268a2d7749cc3fcf5cda405ae5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 2:08:16 AM UTC  (today)

File size:
1.9 MB (1,976,320 bytes)

Product version:
3.4.6.42042

Copyright:
©2016 BitTorrent, Inc. All Rights Reserved.

Original file name:
uTorrent.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
BitTorrent Inc

Authority:
Symantec Corporation

Valid from:
1/22/2016 1:00:00 AM

Valid to:
9/4/2016 1:59:59 AM

Subject:
CN=BitTorrent Inc, O=BitTorrent Inc, L=San Francisco, S=California, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
59123D60D39E60127D6B456A62C9DEAC

File PE Metadata
Compilation timestamp:
3/25/2016 7:23:58 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
24576:iY7FmAJs89UYz4w7pSGk41E5oP/SYAF+vFl8z48qkoxMidSp+Ab8j785RPpv0JKc:s89UrsgGfZPuKw4Mjp+Ay76x6JzGQB4q

Entry address:
0x4FC050

Entry point:
60, BE, 00, C0, 73, 00, 8D, BE, 00, 50, CC, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, 30, AC, 4F, 00, 57, 83, C3, 04, 53, 68, 49, 00, 1C, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Code size:
1.8 MB (1,839,104 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
uTorrent

Command:
"C:\Documents and Settings\{user}\Application data\utorrent\utorrent.exe" \minimized


The file uTorrent.exe has been seen being distributed by the following 13 URLs.

http://dpcdn-s03q.pl/.../uTorrent.exe

http://www.2016delivery31.com/c?x=iQiFzBDh5YQ500Az2cqzfUR2Yxh5otYBSRCHl6BeXyU=&c=Wxh5PYIzzvLCsxuMOiyAfUDJWLNxxQMaAwz8MupEesSM8E/9VYgbVoI/3xqgppZMpiBvjoqszI2q7iKZwg1Jt36SufDgjl1lSHXxsW9DH9pKfp0Cy BWiggCteLmaGopgVRIjKOOZB0uoZ6f4XTedKhIZjqQkRlULbmdsOlOdWQ=&e=0&downloadAs=utorrent.exe&fallback_url=http://utorrent.he.downloadastro.com/.../?utm_source=ira&utm_medium=error_generating&utm_campaign=utorrent

http://download.instalki.org/programy/Windows/Internet/.../uTorrent.exe

http://download-new.utorrent.com/os/windows/track/stable/endpoint/.../

http://download.instalki.info/programy/Windows/Internet/.../uTorrent.exe

http://www.2016delivery31.com/c?x=NFdz3W CCyoUcNle2BIzNM1ums4//EEugVuEvajzAzo=&c=BY42WW4bf/ocjoQVGa4/pLWkBcVLiIZfw zQ3vIdw3jmMrWdspy0a1zetHls2yX9gSol59hRti60 yCSC2NVqDFK gAigI9iT9XSNQq6ZxOjUSOl2AT39/Xe/hc46ZeuwUFr8bbbCuuoEpAmeEUmW0pfMILUfnxwcXN4EB0LtKA=&e=0&downloadAs=utorrent.exe&fallback_url=http://utorrent.en.downloadastro.com/.../?utm_source=ira&utm_medium=error_generating&utm_campaign=utorrent

http://storage.dobreprogramy.pl/.../utorrent.exe

http://www.2016delivery31.com/c?x=K/kkiPHbvOFmq578a1hvSkWzbPZJJdE47lByDISgvyc=&c=jEvG efHOWZr3u0Q1TJP4aYJXYKxaap/zqMuQ/GnZ5aVqOuF2O9Bzyi0ZmHQnSGzWYyk0E5ao tOpAtODDCNaQQv4qnEU8YktI3UuJw8XPvYhAqZ5dTOBZ6n2r7vaFORa2D0QeEZaV7tzjJ9CqYD0Q2Ldxpky977Z3hpwoTwvFk=&e=0&downloadAs=utorrent.exe&fallback_url=http://utorrent.fr.downloadastro.com/.../?utm_source=ira&utm_medium=error_generating&utm_campaign=utorrent

http://www.programosy.pl/.../pobierz,utorrent,2.html

http://www.free-codecs.com/download_soft.php?d=9a9698b1255268fe9aa7ad10a290f64b&s=881&r=&f=utorrent.htm

http://download.ap.bittorrent.com/track/stable/endpoint/utorrent/.../windows

http://software.thaiware.com/download_url.php?id=11017

http://download.ap.bittorrent.com/track/beta/endpoint/utorrent/.../windows

Scan uTorrent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.