Gridinsoft Logo
File Icon

The utorrent_installer.exe (utorrent) File Analysis

Updated 1 year ago
Checked by Malware Check
utorrent_installer.exe

Technical Analysis

File Name utorrent_installer.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
SSDEEP Hash
98304:fjtk87VymQSv/fHR+AjnJu9RSHWWTLkhn6YmHFjxCWyq:fjh7LQSfx3jJu9RSHLpjxCWyq
Scanner Version 1.0.146.174
Database Version 2023-11-09 15:01:18 UTC
⚠

Suspicious File Detected

Detected by 28 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
39%
Detection Rate
3,887,000
File Size (bytes)
28/72
Engines Detected
2023-11-09
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
280ded6988a5e788e942b2096c74bf11
SHA1
cbb0f4015721cb3956d944d4b9d835d18e7f818c
SHA256
9321a78f1954708170d12841279d7836a52ec6bb058862a49b5ab29476078d7d
SHA512
b2a8cecfb5c2f915f6bfa2216a19d13ef2c2ed9083133e5386c21844353be66875fc5bc9f7168e21db42b3e32b1fec1841b97069fec7625aa65d29eba6039976
ImpHash
56a78d55f3f7af51443e58e0ce2fb5f6

Security Engines with Detections (28 of 72)

Bkav
W32.Common.441BEB7D Malicious
Lionic
Riskware.Win32.Utorrent.1!c Malicious
DrWeb
Adware.Downware.20091 Malicious
MicroWorld-eScan
Adware.Generic.3120224 Malicious
ALYac
Adware.Generic.3120224 Malicious
Cylance
unsafe Malicious
VIPRE
Adware.Generic.3120224 Malicious
K7AntiVirus
Adware ( 0057d7301 ) Malicious
BitDefender
Adware.Generic.3120224 Malicious
K7GW
Adware ( 0057d7301 ) Malicious
Arcabit
Adware.Generic.D2F9C60 Malicious
ESET-NOD32
a variant of Win32/uTorrent.E potentially unwanted Malicious
Sophos
Generic Reputation PUA (PUA) Malicious
FireEye
Adware.Generic.3120224 Malicious
Emsisoft
Adware.Generic.3120224 (B) Malicious
Webroot
W32.Malware.Gen Malicious
Varist
W32/ABAdware.WKHB-1481 Malicious
Antiy-AVL
GrayWare/Win32.uTorrent Malicious
GData
Adware.Generic.3120224 Malicious
Google
Detected Malicious
MAX
malware (ai score=64) Malicious
DeepInstinct
MALICIOUS Malicious
VBA32
Adware.Downware Malicious
Malwarebytes
Neshta.Virus.FileInfector.DDS Malicious
Ikarus
PUA.uTorrent Malicious
Fortinet
Riskware/uTorrent Malicious
AVG
Win32:PUP-gen [PUP] Malicious
Avast
Win32:PUP-gen [PUP] Malicious
44 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 0f7354712687fc97aa4c12cf06a41ba6
Fuzzy: 7f9d2d37d5dffecbedc00aee559479af
dHash: f0cccecc9cf8f8f0
Image Base 0x00400000
Entry Point 0x004034f7
Compilation Time 2021-09-25 21:55:49
Checksum 0x003bac8e (Actual: 0x003bac8e)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Digital Signature OK
Imports 7 libraries
ADVAPI32, SHELL32, ole32, COMCTL32, USER32, GDI32, KERNEL32
Exports 0 functions
Resources 31 Resources
Sections 5 Sections

Digital Signatures

▼
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 Rainberry Inc (US)
DigiCert Trusted Root G4 DigiCert Inc (US)
DigiCert Trusted Root G4 DigiCert, Inc. (US)

Version Information

▼
CompanyName Rainberry, Inc.
FileDescription utorrent
FileVersion 3.6.0.46900
InternalName utorrent
LegalCopyright (c) 2022 Rainberry, Inc. All Rights Reserved.
ProductName utorrent
ProductVersion 3.6.0.46900
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 25,877 bytes 26,112 bytes 6.44 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 26E66BEA3B62728A217AE7BF343EBC1A
.rdata 0x00008000 5,018 bytes 5,120 bytes 5.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 691F0273DAD50EC603F6FEDF850B58EE
.data 0x0000a000 131,896 bytes 1,536 bytes 4.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 4B75405561A3FCC45B8FE27A6808F3B5
.ndata 0x0002b000 151,552 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rsrc 0x00050000 116,208 bytes 116,224 bytes 7.21 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 40F283E20BF91B6EC55B62B12A642976
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 31 (114,506 bytes)
Resource Type Count Total Size Percentage
RT_ICON 8 106,993 bytes
93.4%
RT_DIALOG 20 5,644 bytes
4.9%
RT_GROUP_ICON 1 118 bytes
0.1%
RT_VERSION 1 692 bytes
0.6%
RT_MANIFEST 1 1,059 bytes
0.9%

Certificate Chain Analysis

▼
Certificate #1
Subject Rainberry Inc
Rainberry Inc
US
Issuer DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
Serial Number 12905108103973938382365830041924096227
Certificate #2
Subject DigiCert Trusted Root G4
DigiCert Inc
US
Issuer DigiCert Trusted Root G4
Serial Number 7451500558977370777930084869016614236
Certificate #3
Subject DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
DigiCert, Inc.
US
Issuer DigiCert Trusted Root G4
Serial Number 11533403529598586876501374841704918745
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
28 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware