» utorrent-3-4-6-build-42178.exe
Overview
Analysis
File Details
Downloads (1)

utorrent-3-4-6-build-42178.exe

µTorrent

BitTorrent Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from utorrent.ar.softonic.com.

File name:

Publisher:

BitTorrent Inc.

Product:

µTorrent

Version:

3.4.6.42178

MD5:

1603efa3261236c2c6944741ab91bfcf

SHA-1:

fa0be5ebffe6c39361d1fbe5740800c523fbe71a

SHA-256:

e3fe895c713e2f767fe10b3cfdb51b0e00c2b46693bd0d96ee75280744d6a65b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/27/2024 2:53:30 AM UTC (today)

File size:

1.9 MB (2,038,272 bytes)

Product version:

3.4.6.42178

Original file name:

uTorrent.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\utorrent-3-4-6-build-42178.exe

File PE Metadata

Compilation timestamp:

4/5/2016 11:44:02 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

24576:kN5fNg9Fe64G+0yxotvgEkM29DXzj/0QKeEyRIfMzCVZZU/Bx7TvT/XUthjQRVjv:OfNss64G+/gC/AfMK4vXvTELlXD1ouK

Entry address:

0x4EBF60

Entry point:

8D, 1D, 76, BF, 96, 24, 0F, AF, DF, 88, F3, 68, BA, B1, 59, 00, 55, F2, 85, EB, 70, 03, 0F, B7, F6, 73, 04, 85, E9, 88, E7, 21, D1, 77, 09, B9, 63, 93, E3, B9, 10, FD, B6, 01, 4B, B9, 35, 65, 45, C6, 87, CA, 8D, 3E, 49, 0F, AF, D8, 15, 8C, 36, 06, 9D, 8D, 37, 15, 7A, F1, 22, 32, 8B, C0, EB, 0D, 00, F9, 69, D8, F5, C7, 49, AF, BA, 2B, C7, C8, 0A, 2B, EE, 85, D1, 73, 05, 25, 54, 6E, 6A, 6E, 86, E9, 15, F0, 70, 16, 8A, 68, 40, FB, E0, 00, 70, 08, 69, CA, E6, 3A, 28, 15, FF, CA, B7, 1E, 8A, DE, 50, 0F, BE, ED... 
[+]

Entropy:

7.9845 (probably packed)

Code size:

1.7 MB (1,822,720 bytes)

The file utorrent-3-4-6-build-42178.exe has been seen being distributed by the following URL.

http://utorrent.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm5-IpaCmlJY=

Scan utorrent-3-4-6-build-42178.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.