home

uTorrent.exe

µTorrent

BitTorrent Inc

µTorrent is a free ad-supported lightweight BitTorrent client. This is a setup program which is used to install the application. It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘uTorrent’. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
BitTorrent Inc.  (signed by BitTorrent Inc)

Product:
µTorrent

Version:
3.3.2.30303

MD5:
9d8ee64f05ffce71f410671f6ff0464f

SHA-1:
647dbadbd515855a774af3f26761e258eff99074

SHA-256:
36e7ae2d595ca89f22807f0e95b9d539b088058479c3d1e3d8b62781878be3c9

Scanner detections:
4 / 68

Status:
Clean  (4 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
12/25/2024 7:46:22 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.Cloddfe.Trojan
1.3.0.4562

Fortinet FortiGate
W32/AdkDLLWrapper.A
3/1/2014

K7 AntiVirus
Riskware
13.174.10588

VIPRE Antivirus
Trojan.Win32.Generic
24104

File size:
1.1 MB (1,142,864 bytes)

Product version:
3.3.2.30303

Copyright:
©2013 BitTorrent, Inc. All Rights Reserved.

Original file name:
uTorrent.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\utorrent\utorrent.exe

Digital Signature
Signed by:
BitTorrent Inc

Authority:
VeriSign, Inc.

Valid from:
6/4/2013 5:00:00 PM

Valid to:
9/3/2016 4:59:59 PM

Subject:
CN=BitTorrent Inc, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=BitTorrent Inc, L=San Francisco, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5732C1574E6AF828E1B4F93ABB34ED08

File PE Metadata
Compilation timestamp:
11/5/2013 1:04:32 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:i5Zaptm/KI+LxMlXvg3FKZBVr4hvE9jersLVXn+U9ez+1dqed:i5k80LxCXvZ3VEJExersdTfqed

Entry address:
0x265C60

Entry point:
60, BE, 00, A0, 5A, 00, 8D, BE, 00, 70, E5, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, 5F, 35, 26, 00, 57, 83, C3, 04, 53, 68, 5B, BC, 0B, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Entropy:
7.9464  (probably packed)

Code size:
756 KB (774,144 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
uTorrent

Command:
C:\users\{user}\appdata\roaming\utorrent\utorrent.exe \minimized


The file uTorrent.exe has been seen being distributed by the following 50 URLs.

https://dw.uptodown.com/dwn/zQ8Qw7GP_wTiIN_sKGa6FuR0xYO9POV1dZXOF3RYszNM7Thw96csvme1R1Pewt0tvoHi9ZPUzRtWNg5icQoMxwRWkdeVB9ooAseh0bv7-aBJpP4NksGzWponbB_1UrhT/MfjTr0-ryJDhnoD5rkoFkyR2z3pxlvabgzrdYmUC0x0JbmoJdSuCo5-DLKBXnVemR7DZIC7BeD09Fv7j9fPqsGd5QmNgaPRrxTooExPoH8Cfatue4pCuHBoUBjwipdB5/QUnBnDHPeOGMgHUHyILnpVLwamwFO16r8QFh-6lhoe7xeJeeek2sw8vGXb5jnLqpstKQBd5Ma9djusQTbrMpGHt5ZlZafHx1s2YSsr0-G07fVe7kHr2u7ELDSZJg3RSm/.../

https://dw.uptodown.com/dwn/8YoGC58nCyBWrGrT63wvElPD4oZjW-VQxK5tST0HeO3AjFuHzL3B8I3vTE6BV-t9CiCvxYuku7nI6CLpEB2biUz_egG33_Vhtw-RIvF8hJA-kS4IA_CgWr0ft6XvdlG-/REjxfPZ_1y0aliQf2pv_SQ_ygmARKU25A_XeALGpMrWll6-pyKSj7QwXXDcEWpL0r8WCJjxivoQtAG8JRzUxhO2h7jgq2wcG9-634jXXmpEweAmPamBQ310jYWvncgve/oUx9_Ri7kdkBFp9XGvTQtJlLDO2Irk4jfzMMNTzgFUjDVq5yz1Is0PnA1yr6dC6xmMLBllY6eLWswvXA5BX-mcMZKy46dB3wv7Yf3DfyCVJ3f3yPnj-zw8LkgdnMhzlR/.../

https://dw.uptodown.com/dwn/5_5a8cg823v5SA1FcbHTTguFiwG6btsE7x4Y9-j0TsYD8yP2tHJS0OMfzvWiX_jRYAx4u7_QU7fC6frq13ZAWqjYd2JBdmavLTjTBLO4EsZKnDf-KHiA_Y1b3XNqfA20/YilqWsA8EjBYTcLPpGktwECgAO4FZRJi-nuePHJ-yd7M8xmew2IfXhEWWjqZg-wVPpxYtZKaOm3XAMhsRtRtPA_ikPy9IesP-qSQKDwqQls7cK9GDLA4K7iJyDH_S5Uc/cg7WFQhmhppFmIn-WphcnWO7QoI5TqRfXf9qqcsxE1taVY7UNR7pMVC38kLFcqzhTUDeYlcfDwhKc-C0oc1DAheiuoouRexGFTUu9yVKKeeF4bcGWzDXur0RcgxCTtPQ/.../

https://dw.uptodown.com/dwn/lmkXhMBFNhlLvXDeY9tWEHo1Re5VfS4YHpApvt6yznR1Xh0LfkOtqSgJVYfTIfDnBucaoVPC16xVxb2fAubDodTRCxiM1kD2PUYTddu8RhoLTYBQLflTL7wMomjkWfN2/nuF-HDgSRpoBUMQAMBw9p8B4LGEa9UQcNTfSeUkbvOLbDvAsbsCRzY9JaEM23yKVoSJd9qb2C6tLnfNMHqIpucRakfdZzuQiLP_mNmGogN1Ta3QV2g6TX9pSDLJEpeT8/wvY51M1gqtiS1FeKHpcIzhzZJA6224MlXAkKeFtz-8bv8JYYPGkp9DUNOdcFN9CZZUPEQw9gVP1RVk_Gqn5HAXqLR5bDTHcEFeKZTpd6tBmmgorY-9xenDgP0NWVLnCl/.../

https://dw.uptodown.com/dwn/QwDTP2qhdyum8JldzOruKGU_FTPld5rlvMciLPVGbokKIQBq339s1XaL6Xx39qWbRId6rejtKv5YckkbHlR_K_vExcW8RgAXFLTxr5jUeSWRskPufC0IPJyvoBfDJDur/g7CDtC44A1E2SqRUKBB6T6haqJYG5TRxZENTl6_Vuc0Fedi7V0r_5UwTm1wMmx0ZeEWqKkIpxq3XA51ZROdFR5tw7jQA1vMbEkohdE2KcLzTxrztACzbQtZnLJWhAfIC/vZTyjeGuz8wwcMQIMCELeIIRCYE2DOKOFu-IYqf3PfI8FZEnJZV8Bu7AdUmQJIxG__UMbcpaM7j_OFPDBbKJH8JLhJv3pvfb6EHHn57ZebV7qPhFGtIk2qCu4WlKHKQQ/.../

https://dw.uptodown.com/dwn/uXanhLYwR3jN_inN-I1x3slHRh-bxogjlS7oDUS1jnC8mZJuuWW5B6vLCij-0lOQyWA9hbwgZk1gINARylV7KBzBb4ZLEIyevvn82TpHhxjbgfC_ypLhETZgbDnVh4fH/6PiszX3yQWKLp6Pxl1gbfbn4Imj0vhTKgbOXXDlZp9715OLBJcK9oSRzp3mfSN8B2kdbezqeisHhm5hRweYrdUi-pys1J7ZHET7l4MImxHmentUW1aoLnc305w8aL67W/bZBxe1JA2paXnNZubKoMIHzRXDfiv0LLNpFIuVWXIoDTHeyM6Te24UUE5Ntcf5qae8nKuOWuS2xoR_OeY2qINBVVnjR4eRjWF3N3D_lClMnPrKV-Orl-cLXIUKNncjiP/.../

https://dw.uptodown.com/dwn/xCIzhspq3NtpUGaey3QWeaNhCqF6_Ak_6_3jpQBi05yfraFCjIb8-yg9htXJlLRe5YcwFW_yfghFH71kMHmidWAjiKcG_kDwrEdEDOGzlWuIrvZrXI-EBPCGd-Qir_GI/yYk8Bczy3BDdHuuf9Jg-1WJA_gurXjBh6XPqe4ev5eFq1sLIQH8NZBNTqODeTL5_RBG5a-K84a2jl1iNlYXvcCV4uSjHxVYIuYoqKFDvIkTzRny55zqPKSwb62AWd5sm/L_BKrWeBIRpnZqmfTgl-LIZGBvBHM8F8xIVZj5vKX8bQLFm1h35A2t2EW0qp2cYk6qA_jHTTiu9BgQblDjkd1R0Cx_46TQlFInp2wxZzp0etUMtO971jwUg19RRm8JZb/.../

http://download1651.mediafire.com/n224fdza7gog/.../uTorrens By Thechino1600.exe

https://dw.uptodown.com/dwn/3ayR0kROZWL038HpntCayuvktGkPT7O5xSL1dIQKsv6JUrbVCe68w72FrFxJHad5WJBYFCgfBC-qlElQGVhbeR94toSjkYwGRRHc22giNZcq4KiMmx5t33eTrfal4BwN/32JRtMApn3XBtiYiaaf1EPtKsILUOn14xlJ3n8SZfgaH6VBOVHNgjQB-fYyiYByIY2bTbt9sMy7TIldiyttVW-jyevcQlu6phbUrFiV-ltJ6yNHN0vdo4oXdYI3uIuDF/_zMN4qTz10WbQQxZYR_3bsICGjGRPNXJK8ZoSmWFVERds6b7A81KR_N_sOCJhQacgU7VZPzR1pTj-3x3XOFi7wbqvWDjaYyoh1MO-2Xj-FIar4aVJ2EpdqTV50gNz9iX/.../

http://soft.archive2.clubic.com/files/f1b623e905c11a0b85c71b3bd3b24106/5288d1ac/.../torrent_3-3-2-build-30303_fr_18245.exe

https://dw.uptodown.com/dwn/gEtGNMzTTILhYuNQg0MfFGIFdOGpmB0oXyeoQirxKZMAmAHGqdLn1YWLCAPReK336YvW9J6kL6ioic_E7BZBHy6E8QIezwFvLL8ZTnoCFYWlRHSj6Hh7OV-5fghnQSOx/ejP-sk-6_oFitSzxeXiiRuEQu_jDcpG9xXUateGf7JRr2_knko0_eAE303s-94cLvZovFSrm5UcORI6HmVvvOP6UQZVqy-vGkyPBrTdIZyyOe_KEC5cmNFhscPYlf-lC/eNYJcUlNhX4olvSwA8eKHFc8M4zo_Pshjk40uI3KgDPEP7WBTE4_v44Mf3PacWeUssuR3g0NV2p0m7wbbzMbTs9Yt-HwXAgmIAn2orGTHFurSAFJTIYHZuTcYLiDh4Ox/.../

https://dw.uptodown.com/dwn/LlI_280EOQFizz6hI435N9zhJPs8X5qBvXYfJ-JAMbNa5i7MwJnkdUfsUQnI5T2AX4UjHI0Z2eYKRarinunJqoZwnaUpviY-TUo0tblE39UvkkM3cjbw6MFM1Xan3tOe/dHRaxGK-Qn4KYB4KqkMdk_h4t3N1dcvXMFLXK62gdCnQEePa9JmsKW8Yc0RGqkhpcMsxQdPCznvstSFK5nCEN_NTB97f7q0ExJoFmY6cRgVfWet0YyD5NYxdxXzHQMam/SocsNQ343qhSARCTauGSIdFhi03B_1YRqyIf1OtjyE8na2eLBrgkPbqU_CCIlG9h6e2I6NBUmuUA5o4RnVkOEKgwnOcNebyw9tXVubCxoxYEyIFIl1KG58ggKx6_KaOy/.../

http://dw.uptodown.com/dwn/AalH1s-BRsohz1m_P0c0kgHkfUm1xI4JEInBkc8L_Y_ARELq10nCgm655vY7RQZGBrU_fzyPlVIKDjNTAA-qd9qxOUmNcMnIOp-aNeRdRH8q6WDKPBZB5bdBezwkoMdy/e9bvdMe1aYe2GBLrvcGWtVqrimLTtOXqfd2PEMLYe1JW-NuVFhqJNeOcP_pgkkOg2YGaer5W-M59n9XIQDI31WC6weEyVH535kBhX-n4eMIMtvfqak_IOyzC--R-f7S7/UYLN2xwZSercE7Oeh_sikBvjDHHGTYKlYwA_y4w5AB5dmq2Ix_7VXtET27Cnz-nqayV98zSU2oUK1Wae2kwP5ygW_3WSWlzODr22NbgqIpqhJQg5EodVMRH4M-I0HE6a/.../

https://dw.uptodown.com/dwn/Ll_ZnNIOTpt8nTbHz_EdHeRNvwZD5XIdDUDUbSM5NNMIX4oxJjdF7KMKiVOkCGnj1bHa3A1uJHcmqbEqAQSj0kBVWTC2yIJRkzXZvvPfk7H28GOmyxG6A0sTvOgGXu9H/PaBfmsDh6nTiYVVqDstDOU5c2TWUmvOjNwLks9OVGeuy_GgdzP-SCbMVWbA31rA4eBVPVeYvLPgopBXhGjPuUjTmD1hCGWR3YwrtdYyMTdxXatV9QXuDN8LaO_KUD73b/2HyYOfIzP31WjJWN_y2vK9pjYwEnVKRNhTRQNjGEtl5gm3CjacDq3Ih9EcJxxJXXNCBOFnHfputZ_oUyi0fZbZpytshhnxX2bsBmWvHG0sqo5mH3iGtlaeajdreIpMZM/.../

http://soft.archive1.clubic.com/files/be81bdd7555f7c9a14b43c620f3d150f/5293bef3/.../torrent_3-3-2-build-30303_fr_18245.exe

http://dw.en.uptodown.com/dl/1447780761/.../utorrent-3-3-2-build-30303-es-en-br-fr-de-it-cn-jp-ar-ru-win.exe

https://dw.uptodown.com/dwn/eg6Faqe1iJV7EW5Flz9IgEDYCkr4uXTwuSu6IK1K_zj0Pe1jLS67SilJIMuprZ0dil-o6I9NPHJUFeIhGJdlQHzG09mvCF-gFukKrrJVY1DII1TBtKsO7BJmKDsgGFoZ/bHQ6LCW09b4_w4jpqjmKMTv0NYsw1y667T5aMa6DKP0SZhzjvTxobqu6GqS-KmSBhoys6XgREeG8dLKYzk5zxucZpsby7BL65kKKxGQmnJp9VLqiPbHmDFrLxeD6q4Tm/YpdWH6Wqeykn2kxoZ9zeMbe6RDO9fr9G3ZqFw8j3tl6L16npEzFAMxze1IBOvysG7rUAz8FVrPyhWIE4t7lH-vf2RF7KmFYLTvjAd1Y-a_l6ASY1_CxIsOpreygM6117/.../

https://dw.uptodown.com/dwn/uQf2HnbfRfN2GCQ4KbZYhrKHgGcnVEKO4848TgmhxJZXZ3aQU9gyFkHNqorOqfBa7nyOyLZBhzREDtEZkuBcVzH9DTBv3Tf2ow7r5eqmtuAMzxEmoNPmxenxOCmaVNjA/HR0V9nL5muImgBNhgSP2IZYNcSRpLs98iLfyj4L88U4wn07qHUY3o6sAg09k81Li986yrxJ6rEwQaldr9416Rfhq49ODd7p7a2gwFi3L6BgbevkruFRaCXwkWsQDk5wT/H9NUGarNfVaIhxLogPrhu0DcukomqT1dJAn7VrnTf1Ja_Vxfj99zXa-007sWQrycbYOn20Tp4PjtLJs2k0oAltcIGRJ1udE_4fE17nJr6CEE82w_cPdN6G99ojfKM7fR/.../

http://soft.archive1.clubic.com/files/eed1767f520259f65954bdc7b74ab5bd/52c56e3d/.../torrent_3-3-2-build-30303_fr_18245.exe

http://dw.uptodown.com/dwn/4Caump05wzIbPR4Kv8qTkbNB1z7TUjFD0jMoJb2qo2bu8VHaO2U62pevd8uqNl27NYJ21mnu1EvwP2X65WawHxtev87Bwf-xQxUlAEbVUvn14p_RtMsQr4XDnmtV2U88/2YzHh74KMebQE5v6XLIT92mqCgQIMolzuOW7-XXasfvTkUhdgUFs8xJJlpLghEt82mkRJ_CQPKRXw9krCJc9HeRDYpGCqBgnF7SS3vEfm6j4PmSowLOAfdsuj2n01emi/34gz2fs6yX3VvyL7gQPYOPhaeMuMfPkCXBwRwTzz1vk3iq4Zr5b-lz73e_fyyNH7TTmZzmmkHWAxWCHZNDcDc0SMQvtZTqvHbB_HCjZU7qO4fnIXXMyzl2q8uGSM2ogP/.../

http://dw.uptodown.com/dwn/rjpip-LNN9J5t1zKoPf1igWbDTKiiUcXplf_p2ffIYNEyH8Aq9r5KpmoRKEP3mtoWxy-2UhTZ9HOCqTaed2EWVmhkkEHvWaEuVu6_8wExy0iJd4D6HYLEVaeYXnhfnkK/o4DImXO079wCFrzKbqjdQUpA3oJUeD8v74Q2iE6BIV-lGg02KUO2P8Cd7nTY6BukSedp25qe9Y2H8sKapf97WVFCX2ma0VETLU1iHp4lWZQjz5i940p6Pal_osbI-6EC/J4AFZUO6zIGZxRjzUVDbRae5W9i5ZNEPxZUmUiA97wE29w_Y2VSxUrqAaiUvm46ilmB7nen9PnXmAaHrKc243bZItxzisoTh_KZ9U6ZQv8c4KaIqiZDqZ9COuUIonm4D/.../

http://download.ap.bittorrent.com/track/stable/endpoint/utorrent/.../windows

https://dw.uptodown.com/dwn/L94fr8YmfnnxrhA9DwP4_GNEUWuBEW3AhQxAqJEIbDIS1geG6d9-xqnqWKZWktTCMJK3eEIv_r4rhJWteBLp8a-hwqit7PwYpjlVqKn7QVJhsLOBU5b1dCGkq21YGctg/hlv4m7LRPkuXhQedFcKSODA_zMUx9a61KtuGbUoNZcHjBjfNAlYIEo3lthGKilKQDCp4HOY-3QDWaCs5rC2cAEGmZSB94iTjgsW64MQ4NtG-wzOf5XvEWUmOAkvKadad/RWDCgNAKXPhTi0kD8io_yVZNP5SmIzgPesQolWdjEsKW9PmzWHufqu8CYcihMtRwN9quue2K0P_95UEBTiBGRQCa1DIsOz5jMLPW6NNrHb3eUAMl-c6nAkqWE7LVVbI4/.../

http://www.downtoad.com/landing/bing2-uk/.../download.php

https://dw.uptodown.com/dwn/CLRsjiVH8wOmLC2IOeQjlWgp3m1AP8f-JtEyeN-tF675UNvYMqkqpD4klOD1_kv2-R9ZOTvcAlA_DpNLrFTuhPtbn3_dL4CVmpkPGxgvAhNXCArV7fq2oywUAALPLYmZ/vuGsKgM14RDcIfdQO9Kx9boxpL3dNkykpeKbkTEEVXMB5qej0dXH8bzu3i_6zccSIxvucMXMIgmnkwiZylkhPH0iPtHUxPiZ87ehx4HP5yweZkxm52e-bbI88zulnLxc/fMu0LNJKM9En57zdiEm2jQ2_h6zIZwrxmksWsJaYBcT4AzphtSD3KYmOdXpo33htynYnSTANTFjq0-k5timHv8TeCPZItJpmYa3DSJM50ExGs3E65asXE2STKIA6AWYt/.../

http://soft.archive1.clubic.com/files/e8d3bc72076945560154d047490acc00/52c8555f/.../torrent_3-3-2-build-30303_fr_18245.exe

http://soft.archive1.clubic.com/files/5e89127b237b2aaf1a273f21d4499378/52bd475a/.../torrent_3-3-2-build-30303_fr_18245.exe

http://server3.xnavigation.net/dl/MJIxK/734/14016/defa/.../utorrent

http://dw.uptodown.com/dwn/fCBSqZqK1fdTpru_1mrZ2__hPjQxDslZSXvirfer8Rs2fw4aSowi98ztTI0WuD_r5sfDfa9cdOkSUBlWa_xbOOF4YmXf9HbYiI0tGWkP0w52mIOkcxjlJk2iVhOv7Nvf/AuuVA1fqKqtTZ37u5FQSDKZqaPWYaSgF6o3vcp6YeVB2_i8QVKiLaqW3l7lc3qI7slIy16ZCdJiAwAG0fdTeuXEPV-BhDyc6HgI5eyOeoERJ9-udorVHAA1XI2RZSqAH/IfhFi3uDTQA6nhKPjxF0Sq_zXNOskGd1Mc301R6k5RYG2y_-L_BTXELnqXhItH6DFZINrz1YOHn5I5fXHhWQJWe4diV4nqz7_Z8OwomKwmII1tnVH5TUIlnDVHuUY7HB/.../

http://cdn.downtoad.com/.../utorrent.exe

Latest 30 of 51 download URLs

Scan uTorrent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.