Gridinsoft Logo
File Icon

The tor-browser-windows-x86_64-portable-13.0.1.exe (Tor Browser Installer) File Analysis

Updated 1 year ago
Checked by Malaware Check
tor-browser-windows-x86_64-portable-13.0.1.exe

Technical Analysis

File Name tor-browser-windows-x86_64-portable-13.0.1.exe
File Type
PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Scanner Version 1.0.144.174
Database Version 2023-10-31 01:03:00 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
100,650,120
File Size (bytes)
2023-10-31
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
44b2a43398888ad7107668532d8372eb
SHA1
6ea60368c8c010cbdf2a7271667a049f753a5eef
SHA256
920b0907a65b7cf63076fdc80a605283cf51d9742e5726e7b48fb53e3a0071af
SHA512
0695bff00ea14a83efb7663df9a257dc7e6865baec6bdb96b13732e7b15b1dc521296778b2eb01b9ee6ea02c8bc15efe6b469a2f7ac38bf6d9f92d86bd3d2e4f
ImpHash
7cfc673bb4d426dcebc76a3f9ab61eae

PE Analysis

Basic Information

▼
Icon
Hash: fcd5d7661046017a5a910c43c56d25e5
Fuzzy: b55350b14de18a87702ecb77ba3f8a00
dHash: e8ccc4c482828282
Image Base 0x140000000
Entry Point 0x140003eb0
Compilation Time 1970-01-01 00:00:00
Checksum 0x06006876 (Actual: 0x06006876)
OS Version 4.0
PEiD Signatures PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Digital Signature Chain verification from CN=THE TOR PROJECT\, INC., O=THE TOR PROJECT\, INC., L=Winchester, ST=New Hampshire, C=US, 2.5.4.5=208096820, 2.5.4.15=Private Organization, 1.3.6.1.4.1.311.60.2.1.2=Massachusetts, 1.3.6.1.4.1.311.60.2.1.3=US (serial:14710218914108881151720226859244937251, sha1:4deb8c027fff4dd8de3ae9befaa7898618adcf15) failed: Unable to build a validation path for the certificate "Common Name: THE TOR PROJECT, INC.; Organization: THE TOR PROJECT, INC.; Locality: Winchester; State/Province: New Hampshire; Country: US; Serial Number: 208096820; Business Category: Private Organization; Incorporation State/Province: Massachusetts; Incorporation Country: US" - no issuer matching "Common Name: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; Organization: DigiCert, Inc.; Country: US" was found
Imports 7 libraries
ADVAPI32, COMCTL32, GDI32, KERNEL32, ole32, SHELL32, USER32
Exports 0 functions
Resources 42 Resources
Sections 9 Sections

Digital Signatures

▼
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 THE TOR PROJECT, INC. (US)
DigiCert Assured ID Root CA DigiCert Inc (US)
DigiCert Trusted Root G4 DigiCert, Inc. (US)
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA DigiCert, Inc. (US)

Version Information

▼
FileDescription Tor Browser Installer
LegalCopyright © 2023 The Tor Project
ProductName Tor Browser
ProductVersion 13.0.1
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 33,152 bytes 33,280 bytes 6.27 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D9CC17ACA359086BF53CEB86E4144AD6
.data 0x0000a000 320 bytes 512 bytes 1.52 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE FCBD13093D6BE7CCBDE391E85093F80F
.rdata 0x0000b000 51,920 bytes 52,224 bytes 6.89 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 258E5333818B6720CEE375E4DDB5D986
.xdata 0x00018000 1,132 bytes 1,536 bytes 3.61 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3695E3872981194196594C4AF48446C3
.pdata 0x00019000 1,212 bytes 1,536 bytes 3.87 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5DCF1E4DEA6FAAD6E845A6F4F74ED711
.bss 0x0001a000 125,696 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x00039000 6,492 bytes 6,656 bytes 4.61 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F46A8F6392D5E4BC1690EB9221C1074B
.ndata 0x0003b000 139,264 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x0005d000 76,432 bytes 76,800 bytes 6.98 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 47AAF1DFE613382940706DC87997AAE6
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 42 (74,171 bytes)
Resource Type Count Total Size Percentage
RT_ICON 7 61,410 bytes
82.8%
RT_DIALOG 32 10,912 bytes
14.7%
RT_GROUP_ICON 1 104 bytes
0.1%
RT_VERSION 1 496 bytes
0.7%
RT_MANIFEST 1 1,249 bytes
1.7%

Certificate Chain Analysis

▼
Certificate #1
Subject THE TOR PROJECT, INC.
THE TOR PROJECT, INC.
US
Issuer DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
Serial Number 14710218914108881151720226859244937251
Certificate #2
Subject DigiCert Trusted Root G4
DigiCert Inc
US
Issuer DigiCert Assured ID Root CA
Serial Number 19414496059604725969669510860671817818
Certificate #3
Subject DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA
DigiCert, Inc.
US
Issuer DigiCert Trusted Root G4
Serial Number 9586110043380832440035821245782711899
Certificate #4
Subject DigiCert Timestamp 2023
DigiCert, Inc.
US
Issuer DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA
Serial Number 7002784885422699301467740558332354838
Certificate Verification Status

Chain verification from CN=THE TOR PROJECT\, INC., O=THE TOR PROJECT\, INC., L=Winchester, ST=New Hampshire, C=US, 2.5.4.5=208096820, 2.5.4.15=Private Organization, 1.3.6.1.4.1.311.60.2.1.2=Massachusetts, 1.3.6.1.4.1.311.60.2.1.3=US (serial:14710218914108881151720226859244937251, sha1:4deb8c027fff4dd8de3ae9befaa7898618adcf15) failed: Unable to build a validation path for the certificate "Common Name: THE TOR PROJECT, INC.; Organization: THE TOR PROJECT, INC.; Locality: Winchester; State/Province: New Hampshire; Country: US; Serial Number: 208096820; Business Category: Private Organization; Incorporation State/Province: Massachusetts; Incorporation Country: US" - no issuer matching "Common Name: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; Organization: DigiCert, Inc.; Country: US" was found

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware