Should I block it?
45% of PCs block this file from running.
Possible reason:
Performance resource utilization
Additional versions
Relationships
Parent process
Related files
PE file structure |
Show functions |
Import table
msvcrt.dll
DllMain
uTorrent.exe
µTorrent by BitTorrent Inc (Signed)
Version: | 3.3.2.30180 |
MD5: | 27da3304bcfc3a131141543767fdfe35 |
SHA1: | 91295aa24445546a1d7c460262ddb8f3a77149f2 |
SHA256: | 88fb7896bbede943277a2652c8b243ef477b07a2e733c4fb88e21e7472218435 |
Overview
utorrent.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. It is installed with a couple of know programs including µTorrent published by BitTorrent Inc., Evernote v. 4.5.2 from Evernote Corp. and Evernote v. 4.5.2 by Evernote Corp..
Details
File name: | utorrent.exe |
Publisher: | BitTorrent Inc. |
Product name: | µTorrent |
Typical file path: | C:\Program Files\utorrent\utorrent.exe |
File version: | 3.3.2.30180 |
Size: | 1.09 MB (1,141,328 bytes) |
Build date: | 10/2/2013 5:23 PM |
Certificate |
Issued to: | BitTorrent Inc |
Authority (CA): | VeriSign |
Effective date: | Monday, June 21, 2010 |
Expiration date: | Saturday, July 27, 2013 |
Digital DNA |
PE subsystem: | Windows GUI |
File packed: | Yes |
Code language: | Microsoft Visual C++ |
.NET CLR: | No |
More details
Programs
The following programs will install this file
µTorrent is a is a free, ad-supported, lighter-weight BitTorrent client designed to consume less resources then the full BitTorrent version. Some uTorrent installs include potentially unwanted programs in the form of the Conduit Engine, which installs a toolbar, and makes homepage and default search engine changes to a user's web browser.
Evernote is a suite of software and services designed for notetaking and archiving. A "note" can be a piece of formatted text, a full webpage or webpage excerpt, a photograph, a voice memo, or a handwritten "ink" note. Notes can also have file attachments. Web clipping support is installed by default on the Internet Explorer and Safari browsers when the Evernote software is installed under Windows. The Evernote email-clipper is automat...
Behaviors
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
- Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
- Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
- Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
- Firewall exception for 'C:\Program Files\uTorrent\uTorrent.exe'
- Firewall exception for 'C:\Program\uTorrent\uTorrent.exe'
- Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
- Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
- Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
- Firewall exception for 'C:\Program Files\uTorrent\uTorrent.exe'
- Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
- Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
- Firewall exception for 'C:\Program Files\uTorrent\uTorrent.exe'
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'uTorrent' → "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
Network connections
Access through an approved Windows firewall exception
[TCP] 200-138-52-170.ctame705.dsl.brasiltelecom.net.br (200.138.52.170:56575)
[UDP] listens on port 61829
[UDP] listens on port 58877
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00219655% | |
Kernel CPU: | 0.00067390% | |
User CPU: | 0.00152265% | |
Kernel CPU time: | 137,852 ms/min | |
CPU cycles: | 9,692,492/sec | |
Context switches: | 130/sec | |
Memory |
Private memory: | 18.07 MB | |
Private (maximum): | 34.86 MB | |
Private (minimum): | 5.17 MB | |
Non-paged memory: | 18.07 MB | |
Virtual memory: | 297.98 MB | |
Virtual memory (peak): | 326.91 MB | |
Working set: | 8.84 MB | |
Working set (peak): | 37.29 MB | |
Page faults: | 101,788/min | |
I/O |
I/O read transfer: | 594.46 KB/sec | |
I/O read operations: | 24/sec | |
I/O write transfer: | 535.41 KB/sec | |
I/O write operations: | 4/sec | |
I/O other transfer: | 24.03 KB/sec | |
I/O other operations: | 828/sec | |
Resource allocations |
Threads: | 36 | |
Handles: | 744 | |
GUI GDI count: | 306 | |
GUI GDI peak: | 329 | |
GUI USER count: | 156 | |
GUI USER peak: | 228 | |
Process properties
Distribution by Windows OS
OS version | distribution |
Windows 7 Home Premium |
22.34% |
|
Windows 7 Ultimate |
19.80% |
|
Microsoft Windows XP |
19.80% |
|
Windows 8 Pro |
7.11% |
|
Windows 8.1 |
6.09% |
|
Windows 8 |
5.08% |
|
Windows 8.1 Pro |
4.06% |
|
Windows 7 Professional |
3.05% |
|
Windows 7 Home Basic |
2.54% |
|
Windows 8.1 Single Language |
2.03% |
|
Windows 8 Single Language |
2.03% |
|
Windows 8 Pro with Media Center |
2.03% |
|
Windows Vista Home Premium |
1.02% |
|
Windows 7 Starter |
1.02% |
|
Windows 8.1 N |
0.51% |
|
Windows 8.1 Pro with Media Center |
0.51% |
|
Windows Developer Preview |
0.51% |
|
Windows 8 Enterprise Evaluation |
0.51% |
|
Distribution by country
United States installs about 25.89% of µTorrent.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Dell |
20.81% |
|
Hewlett-Packard |
17.65% |
|
ASUS |
15.38% |
|
Toshiba |
8.14% |
|
Lenovo |
7.24% |
|
Acer |
6.79% |
|
Sony |
5.43% |
|
GIGABYTE |
4.52% |
|
American Megatrends |
4.07% |
|
Intel |
3.62% |
|
Samsung |
2.71% |
|
MSI |
1.81% |
|
Alienware |
1.36% |
|
Packard Bell |
0.45% |
|