Gridinsoft Logo
File Icon

The utorrent_installer.exe (utorrent) File Analysis

Updated 1 year ago
Checked by Malaware Check
utorrent_installer.exe

Technical Analysis

File Name utorrent_installer.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
SSDEEP Hash
98304:nytk87VymQSv/fHR6w2LDU3Ssjka2PZ3PyL:nyh7LQSfx6BLDUCxlC
Scanner Version 1.0.170.174
Database Version 2024-04-02 19:00:37 UTC
⚠

Suspicious File Detected

Detected by 7 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
11%
Detection Rate
3,715,824
File Size (bytes)
7/66
Engines Detected
2024-04-02
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
955d199171543076f547aa4759404f8f
SHA1
c0072c0b1784f81747b2b432b2a6044b9e433344
SHA256
855677e6a1146cc549ba5738349a23decf73a0982280c179d48389edf9ad200f
SHA512
2d5fd88e5cecc751a8622adaaff96027f99803c712c3b0834936f762c72732b0a8d74f43d95d74787fe400ef2371b517b7a436f08edc48092f33389995c263c7
ImpHash
56a78d55f3f7af51443e58e0ce2fb5f6

Security Engines with Detections (7 of 66)

Malwarebytes
Malware.AI.2435046976 Malicious
ESET-NOD32
a variant of Win32/uTorrent_AGen.A potentially unwanted Malicious
Ikarus
PUA.uTorrent Malicious
Antiy-AVL
GrayWare/Win32.uTorrent Malicious
VBA32
suspected of Trojan.Downloader.gen Malicious
Fortinet
Riskware/uTorrent Malicious
DeepInstinct
MALICIOUS Malicious
59 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 0f7354712687fc97aa4c12cf06a41ba6
Fuzzy: 7f9d2d37d5dffecbedc00aee559479af
dHash: f0cccecc9cf8f8f0
Image Base 0x00400000
Entry Point 0x004034f7
Compilation Time 2021-09-25 21:55:49
Checksum 0x00393242 (Actual: 0x00393242)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Digital Signature OK
Imports 7 libraries
ADVAPI32, SHELL32, ole32, COMCTL32, USER32, GDI32, KERNEL32
Exports 0 functions
Resources 31 Resources
Sections 5 Sections

Version Information

▼
CompanyName BitTorrent Limited
FileDescription utorrent
FileVersion 3.6.0.47020
InternalName utorrent
LegalCopyright (c) 2023 BitTorrent Limited All Rights Reserved.
ProductName utorrent
ProductVersion 3.6.0.47020
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 25,877 bytes 26,112 bytes 6.44 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 26E66BEA3B62728A217AE7BF343EBC1A
.rdata 0x00008000 5,018 bytes 5,120 bytes 5.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 691F0273DAD50EC603F6FEDF850B58EE
.data 0x0000a000 131,896 bytes 1,536 bytes 4.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 4B75405561A3FCC45B8FE27A6808F3B5
.ndata 0x0002b000 151,552 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rsrc 0x00050000 116,224 bytes 116,224 bytes 7.21 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4B4A4F9D05B9CC1123D9A0FAAE3C5700
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 31 (114,522 bytes)
Resource Type Count Total Size Percentage
RT_ICON 8 106,993 bytes
93.4%
RT_DIALOG 20 5,644 bytes
4.9%
RT_GROUP_ICON 1 118 bytes
0.1%
RT_VERSION 1 708 bytes
0.6%
RT_MANIFEST 1 1,059 bytes
0.9%

Certificate Chain Analysis

▼
Certificate Information
Product utorrent
Description utorrent
File Version 3.6.0.47020
Signing Date 06:39 AM 02/23/2024 (472 days ago)
Verification Status Signed
Signers BitTorrent Inc; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4
Counter Signers Entrust Timestamp Authority - TSA1; Entrust Timestamping CA - TS1; Entrust (2048)
Internal Name utorrent
Copyright (c) 2023 BitTorrent Limited All Rights Reserved.
Certificate Chain Summary
BitTorrent Inc #1 Primary
Validity Period: 2023-01-31 00:00:00 → 2026-01-30 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0D D1 CB D1 68 65 B1 63 9D B9 84 5C CE CB D2 A2
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #2 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
DigiCert Trusted Root G4 #3 Chain
Validity Period: 2013-08-01 12:00:00 → 2038-01-15 12:00:00
Signature Algorithm: sha384RSA
Serial Number: 05 9B 1B 57 9E 8E 21 32 E2 39 07 BD A7 77 75 5C
Entrust.net Certification Authority (2048) #4 Chain
Validity Period: 1999-12-24 17:50:51 → 2029-07-24 14:15:12
Signature Algorithm: sha1RSA
Serial Number: 38 63 DE F8
Entrust Timestamping CA - TS1 #5 Chain
Validity Period: 2015-07-22 19:02:54 → 2029-06-22 19:32:54
Signature Algorithm: sha256RSA
Serial Number: 58 DA 13 FF 00 00 00 00 51 CE 0D F7
Entrust Timestamp Authority - TSA1 #6 Chain
Validity Period: 2024-01-19 16:46:28 → 2029-06-01 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 07 D7 13 53 DA 25 61 B4 61 E9 90 47 8A 4C CE 04

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
7 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware