» uTorrent.exe
Overview
Analysis
File Details
Programs (2)
Downloads (6)

uTorrent.exe

µTorrent

BitTorrent Inc

µTorrent is a free ad-supported lightweight BitTorrent client. This is a setup program which is used to install the application. The file has been seen being downloaded from www.softportal.com and multiple other hosts.

File name:

uTorrent.exe

Publisher:

BitTorrent Inc. (signed by BitTorrent Inc)

Product:

µTorrent

Version:

3.4.0.30660

MD5:

875257dec3be23d6e4c43639992d291b

SHA-1:

81b48aafc7658f089d1074d10882f5ec2a1ed7cf

SHA-256:

71fca466150f09f82bb588b8368d1d2e8caac971197a9518799bb818d190df33

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

False Positives:

A number of engines detected this file but were erroneous detections (false positives).

Analysis date:

4/24/2024 12:22:58 AM UTC (today)

File size:

1.5 MB (1,614,416 bytes)

Product version:

3.4.0.30660

Original file name:

uTorrent.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\roaming\utorrent\utorrent.exe

Digital Signature

Signed by:

BitTorrent Inc

Authority:

VeriSign, Inc.

Valid from:

6/4/2013 5:00:00 PM

Valid to:

9/3/2016 4:59:59 PM

Subject:

CN=BitTorrent Inc, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=BitTorrent Inc, L=San Francisco, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5732C1574E6AF828E1B4F93ABB34ED08

File PE Metadata

Compilation timestamp:

3/11/2014 4:29:19 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

49152:YFDk2Y3AZLylYCm2SWHGBeQlB7L7SAvJqed:YFDfY3ABylYN2S/9BeH2

Entry address:

0x2F03F0

Entry point:

60, BE, 00, A0, 5E, 00, 8D, BE, 00, 70, E1, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, 2E, E6, 2E, 00, 57, 83, C3, 04, 53, 68, E6, 63, 10, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A... 
[+]

Entropy:

7.9655 (probably packed)

Code size:

1 MB (1,077,248 bytes)

The file uTorrent.exe has been discovered within the following programs.

League of Legends by Riot Games

League of Legends (LoL) is a multiplayer online battle arena video game developed and published by Riot Games for Microsoft Windows. Players are formed into 2 even teams of Champions, 3v3 or 5v5. League of Legends is a session-based game.

www.RiotGames.com

12% remove it

LogMeIn Hamachi by LogMeIn, Inc.

LogMeIn remote access products use a proprietary remote desktop protocol that is transmitted via SSL. An SSL certificate is created for each remote desktop and is used to cryptographically secure communications between the remote desktop and the accessing computer.

secure.logmein.com/products/hamachi/download.aspx

About 7% of users remove it

The file uTorrent.exe has been seen being distributed by the following 6 URLs.

http://www.softportal.com/getsoft-4596-utorrent-2.html

http://software.thaiware.com/download_url.php?id=11017

http://download.utorrent.com/.../utorrent.exe

http://www.commentcamarche.net/download/.../telecharger-196-utorrent

http://download-new.utorrent.com/endpoint/utorrent/os/windows/track/.../

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.