uTorrent.exe
µTorrent by BitTorrent Inc (Signed)
| Version: | 3.2.3.28705 |
| MD5: | 88155d3d23ca8a1dfb1f45ee3e4c8df8 |
| SHA1: | 3176d4803e93f04fb2a4882d78ee4117650b8a32 |
| SHA256: | 4733ee6718e8888331b6cfc61eeba4485dda993c4c59688f1c4a82556b67fa7a |
What is uTorrent.exe?
µTorrent is a is a free, ad-supported, lighter-weight BitTorrent client designed to consume less resources then the full BitTorrent version. Some uTorrent installs include adware in the form of the Conduit Engine, which installs a toolbar, and makes homepage and default search engine changes to a user's web browser.
About uTorrent.exe (from BitTorrent Inc)
“µTorrent is designed to consume as few resources as possible to avoid impacting your computer use. µTorrent will work on Windows XP and up, including Windows 7. BitTorrent's two main products today in”
Details
| File name: | uTorrent.exe |
| Publisher: | BitTorrent, Inc. |
| Product name: | µTorrent |
| Typical file path: | C:\Program Files\utorrent\utorrent.exe |
| File version: | 3.2.3.28705 |
| Size: | 946.39 KB (969,104 bytes) |
| Certificate |
| Issued to: | BitTorrent Inc |
| Authority (CA): | VeriSign |
| Effective date: | Sunday, June 20, 2010 |
| Expiration date: | Friday, July 26, 2013 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| Entropy: | 7.581874 |
| File packed: | No |
| Code language: | Microsoft Visual C++ |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
µTorrent is a is a free, ad-supported, lighter-weight BitTorrent client designed to consume less resources then the full BitTorrent version. Some uTorrent installs include potentially unwanted programs in the form of the Conduit Engine, which installs a toolbar, and makes homepage and default search engine changes to a user's web browser.
|
Computer Systems Odessa corp. |
|
“ConceptDraw MINDMAP offers a variety of outputs, making it easy to share map content in the appropriate format. Creating output is simple; just one click allows you to output to other applications, such as Microsoft PowerPoint and Word, as well as ConceptDraw PROJECT and ConceptDraw PRO. You can generate text and tables that are pertinent to your work. The output capability of ConceptDraw MINDMAP unlocks the information in your maps to ...”
Firefox 21 was released on May 14, 2013. The Social API now supports multiple providers, enhanced three-state UI for Do Not Track (DNT). Mozilla Firefox is a free and open source is a web browser coordinated by Mozilla Corporation and Mozilla Foundation that is a heavily localized. Firefox uses the Gecko layout engine to render web pages, which implements current and anticipated web standards. Functions can be added through extensions, ...
The Opera browser is a free web browser that handles common Internet-related tasks such as displaying web sites, sending and receiving e-mail messages, managing contacts, chatting on IRC, downloading files via BitTorrent, and reading web feeds. Features include tabbed browsing, page zooming, mouse gestures, and an integrated download manager. Its security features include built-in phishing and malware protection and the ability to delet...
“Pinnacle is a software program that enables you to play your favorite games with any gamepad, joystick, or other type of game controller. Pinnacle comes preconfigured for most popular game titles and gamepads, which means setup is quick and easy. As new games or software updates are released, they are effortlessly installed with a point and click. Pinnacle is also a game launching platform, allowing you to categorize your games and laun...”
Spotify is a Swedish music streaming service offering digitally restricted streaming of selected music from a range of major and independent record labels, including Sony, EMI, Warner Music Group and Universal. Music can be browsed by artist, album, record label, genre or playlist as well as by direct searches. On desktop clients, a link allows the listener to purchase selected material via partner retailers.
“MATLAB® is a high-level language and interactive environment for numerical computation, visualization, and programming. Using MATLAB, you can analyze data, develop algorithms, and create models and applications. The language, tools, and built-in math functions enable you to explore multiple approaches and reach a solution faster than with spreadsheets or traditional programming languages, such as C/C++ or Java™. You can use MATLAB for a...”
The software currently distributes the app through the OpenCandy monetization platform which is known to distribute adware.
Behaviors
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'uTorrent' → "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\PROGRAMAS\utorrent\utorrent-plus\utorrent-plus-3.1.exe'
- Firewall exception for 'C:\Documents and Settings\Administratör\Skrivbord\26051-671819-utorrent.exe'
- Firewall exception for 'C:\Program Files\uTorrent\uTorrent.exe'
- Firewall exception for 'C:\Program Files\uTorrent\uTorrent.exe'
- Firewall exception for 'C:\Documents and Settings\věruška\Dokumenty\Stažené soubory\uTorrent.exe'
- Firewall exception for 'C:\Documents and Settings\user\Desktop\uTorrent.exe'
- Firewall exception for 'C:\Software\uTorrent.exe'
- Firewall exception for 'C:\Program Files\uTorrent\uTorrent.exe'
- Firewall exception for 'C:\Program Files\uTorrent\uTorrent.exe'
Scheduled tasks
- The job '{3E0C592A-6E89-47B8-B8E8-7EFA3DE8B8BB}' runs on registration in the path '\{3E0C592A-6E89-47B8-B8E8-7EFA3DE8B8BB}'
Network connections
Access through an approved Windows firewall exception
[TCP] 203-144-174-212.static.asianet.co.th (203.144.174.212:18090)
[TCP] 182.55.133.11:19053
[TCP] ec2-23-20-74-48.compute-1.amazonaws.com (23.20.74.48:9051)
[TCP] aub23-1-78-246-96-158.fbx.proxad.net (78.246.96.158:51413)
[TCP] bb16b805.virtua.com.br (187.22.184.5:51232)
[TCP] 75-133-165-160.dhcp.stls.mo.charter.com (75.133.165.160:54754)
[TCP] host-92-30-226-120.as13285.net (92.30.226.120:13265)
[TCP] b01a72d3.bb.sky.com (176.26.114.211:12678)
[TCP] 112.205.128.167.pldt.net (112.205.128.167:41220)
[TCP] 50.65.26.192:50989
[TCP] cpe-85-10-24-227.dynamic.amis.net (85.10.24.227:64814)
[TCP] 112.200.81.204.pldt.net (112.200.81.204:41603)
[TCP] ec2-23-20-184-67.compute-1.amazonaws.com (23.20.184.67:9053)
[TCP] 76-250-40-118.lightspeed.mdsnwi.sbcglobal.net (76.250.40.118:11680)
[TCP] hosted-by.bergdorf-group.com (91.224.160.192:2710)
[TCP] fn135-dynamic144.fariya.com (111.92.135.144:14527)
[TCP] 121.172.134.224:46468
[TCP] 93-137-235-197.adsl.net.t-com.hr (93.137.235.197:50218)
[TCP] bba794345.alshamil.net.ae (92.97.80.87:55590)
[TCP] host86-145-232-130.range86-145.btcentralplus.com (86.145.232.130:63849)
[TCP] 115-28-18-190.fibertel.com.ar (190.18.28.115:60801)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.01048533% | |
| Kernel CPU: | 0.00445472% | |
| User CPU: | 0.00603061% | |
| Kernel CPU time: | 519,593,666 ms/min | |
| CPU cycles: | 3,008,243/sec | |
| Context switches: | 226/sec | |
| Memory |
| Private memory: | 36.78 MB | |
| Private (maximum): | 52.1 MB | |
| Private (minimum): | 23.02 MB | |
| Non-paged memory: | 36.78 MB | |
| Virtual memory: | 222.67 MB | |
| Virtual memory (peak): | 258.08 MB | |
| Working set: | 36.95 MB | |
| Working set (peak): | 54.03 MB | |
| Page faults: | 902,562/min | |
| I/O |
| I/O read transfer: | 8.29 MB/sec | |
| I/O read operations: | 284/sec | |
| I/O write transfer: | 4.05 MB/sec | |
| I/O write operations: | 10/sec | |
| I/O other transfer: | 314.59 KB/sec | |
| I/O other operations: | 24,314/sec | |
| Resource allocations |
| Threads: | 18 | |
| Handles: | 756 | |
| GUI GDI count: | 395 | |
| GUI GDI peak: | 434 | |
| GUI USER count: | 168 | |
| GUI USER peak: | 205 | |
Process properties
| Integrety level: | Medium |
| Platform: | 32-bit |
| Command lines: |
- "C:\Program Files\utorrent\utorrent.exe" /minimized
- "C:\Program Files\utorrent\utorrent.exe"
- "C:\Program Files\utorrent\utorrent.exe" "C:\users\user\appdata\local\microsoft\windows\temporary internet files\content.ie5\3h709i2u\catalina+-+fucked+by+our+dads.avi.torrent"
- "C:\Program Files\utorrent\utorrent.exe" "C:\users\gaiter\downloads\[kat.ph]game.of.thrones.season.3.episode.1.s03e01.torrent"
- "C:\Program Files\utorrent\utorrent.exe" "C:\users\luis\saved games\[isohunt] aliens_colonial_marines-flt.torrent"
- "C:\Program Files\utorrent\utorrent.exe" "C:\users\chris\downloads\wadjda (2013) french dvdrip xvid adtrg [2461893].torrent"
- "C:\Program Files\utorrent\utorrent.exe" "magneC:?xt=urC:btiC:7c89b5c900a60f9a7bbc9b9c5d1762e49c1deaa5&dn=aiseesoft+total+video+converter+platinum+v6.3.18+including+crack&tr=udC://tracker.openbittorrent.coC:80&tr=udC://tracker.publicbt.coC:80&tr=udC://tracker.istole.iC:6969&tr=udC://tracker.ccc.dC:80"
- (15 more)
|
| Owner: | User |
| Parent processes: |
|
Threads
Averages
| uTorrent.exe (main module) |
| Total CPU: | 0.54173632% | |
| Kernel CPU: | 0.28649907% | |
| User CPU: | 0.25523724% | |
| CPU cycles: | 16,360,591/sec | |
| Context switches: | 33/sec | |
| Memory: | 5.45 MB | |
| msvcrt.dll (Windows NT CRT DLL by Microsoft) |
| Total CPU: | 0.47076942% | |
| Kernel CPU: | 0.14572531% | |
| User CPU: | 0.32504411% | |
| CPU cycles: | 18,799,142/sec | |
| Memory: | 680 KB | |
| ole32.dll |
| Total CPU: | 0.10292496% | |
| Kernel CPU: | 0.06095486% | |
| User CPU: | 0.04197010% | |
| CPU cycles: | 2,001,408/sec | |
| Memory: | 1.27 MB | |
| dsound.dll |
| Total CPU: | 0.02592799% | |
| Kernel CPU: | 0.00658375% | |
| User CPU: | 0.01934424% | |
| CPU cycles: | 4,745,987/sec | |
| Memory: | 448 KB | |
| ntdll.dll |
| Total CPU: | 0.01563083% | |
| Kernel CPU: | 0.00846903% | |
| User CPU: | 0.00716180% | |
| CPU cycles: | 159,079/sec | |
| Memory: | 1.16 MB | |
| wow64.dll |
| Total CPU: | 0.00389765% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00389765% | |
| CPU cycles: | 25,657/sec | |
| Memory: | 276 KB | |
| winhttp.dll (Windows HTTP Services by Microsoft) |
| Total CPU: | 0.00386602% | |
| Kernel CPU: | 0.00273662% | |
| User CPU: | 0.00112940% | |
| CPU cycles: | 95,384/sec | |
| Memory: | 384 KB | |
| SSDPAPI.dll |
| Total CPU: | 0.00335552% | |
| Kernel CPU: | 0.00143342% | |
| User CPU: | 0.00192209% | |
| CPU cycles: | 67,335/sec | |
| Memory: | 48 KB | |
| mswsock.dll |
| Total CPU: | 0.00264759% | |
| Kernel CPU: | 0.00222524% | |
| User CPU: | 0.00042235% | |
| CPU cycles: | 25,106/sec | |
| Memory: | 240 KB | |
| wow64cpu.dll |
| Total CPU: | 0.00028514% | |
| Kernel CPU: | 0.00007686% | |
| User CPU: | 0.00020828% | |
| CPU cycles: | 6,372/sec | |
| Memory: | 32 KB | |
| gdiplus.dll |
| Total CPU: | 0.00020731% | |
| Kernel CPU: | 0.00016139% | |
| User CPU: | 0.00004592% | |
| CPU cycles: | 3,622/sec | |
| Memory: | 1.56 MB | |
| WININET.dll |
| Total CPU: | 0.00014269% | |
| Kernel CPU: | 0.00011010% | |
| User CPU: | 0.00003259% | |
| CPU cycles: | 21,656/sec | |
| Memory: | 1.11 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
36.50% |
|
| Windows 7 Ultimate |
23.50% |
|
| Windows 7 Home Premium |
18.50% |
|
| Windows 8 Pro |
6.00% |
|
| Windows 7 Professional |
5.00% |
|
| Windows Vista Home Premium |
4.00% |
|
| Windows 8 |
2.00% |
|
| Windows XP Professional |
1.50% |
|
| Windows 7 Home Basic |
1.50% |
|
| Windows 8 Enterprise N |
1.00% |
|
| Windows 8 Release Preview |
0.50% |
|
Distribution by country
United States installs about 15.00% of µTorrent.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
26.42% |
|
| Hewlett-Packard |
18.87% |
|
| GIGABYTE |
15.09% |
|
| Acer |
9.43% |
|
| Lenovo |
7.55% |
|
| American Megatrends |
7.55% |
|
| ASUS |
7.55% |
|
| Compaq |
3.77% |
|
| Alienware |
1.89% |
|
| Samsung |
1.89% |
|
