Gridinsoft Logo
File Icon

The utorrent_installer.exe (uTorrent Classic) File Analysis

Updated 10 minutes ago
Checked by Malware Check
utorrent_installer.exe

Technical Analysis

File Name utorrent_installer.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
98304:KPFOQyypcTQddo4P1sqUUmo/3svIhk3GwhBxjfdXFDmB2ajboeramRjbSJT0nS00:KPFO9TQdda0mUhk3GwWFLOyomFHKnPH
Scanner Version 1.0.219.174
Database Version 2025-07-03 23:00:28 UTC
⚠

Suspicious File Detected

Detected by 16 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
22%
Detection Rate
4,506,632
File Size (bytes)
16/72
Engines Detected
2025-07-03
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
82ab791fb9e2cb9d750e9b008814107b
SHA1
cdf717bcc9476fa44d315abf1e07208c7ff2a04a
SHA256
9ef40fdafb58246ec38077851bbaf7c32367c904bb64a11ade736408e1fa5850
SHA512
e3651d1663d9e40de241fba0a3ebf6d6f4af841e4253b1af8e443db04dfa1d23db6112606cee1147c4298cc236c7c02eb811a59d1a0bedd3c1aae58d6e952b9b
ImpHash
2c8afe487b53871f5c87d7fe0e8fb204

Security Engines with Detections (16 of 72)

CTX
exe.trojan.cppinstaller Malicious
CAT-QuickHeal
Trojan.Ghanarava.175152511014107b Malicious
Malwarebytes
PUP.Optional.Utorrent Malicious
CrowdStrike
win/grayware_confidence_60% (D) Malicious
ESET-NOD32
a variant of Win32/CppInstaller.A potentially unwanted Malicious
Sophos
Generic Reputation PUA (PUA) Malicious
Ikarus
PUA.CppInstaller Malicious
GData
Win32.Trojan.PSE.CLHNOI Malicious
Varist
W32/ABApplication.ITET-7256 Malicious
Google
Detected Malicious
DeepInstinct
MALICIOUS Malicious
Cylance
Unsafe Malicious
Tencent
Pua:Adware.Win32.Cppsetup.16001969 Malicious
TrellixENS
Artemis!82AB791FB9E2 Malicious
MaxSecure
Trojan.Malware.74402883.susgen Malicious
Fortinet
Riskware/CppInstaller Malicious
56 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 7ec2b329075d5006effa6bbc04f44475
Fuzzy: d5b4c97d99af0de364dcff143e5b7173
dHash: f8cacecc9c69b8f8
Image Base 0x00400000
Entry Point 0x005ca833
Compilation Time 2025-06-20 06:58:03
Checksum 0x00450ad8 (Actual: 0x00450ad8)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 21 libraries
Exports 0 functions
Resources 779 Resources
Sections 5 Sections

Version Information

▼
CompanyName uTorrent Classic
FileDescription uTorrent Classic
FileVersion 3.2.0.06206
LegalCopyright (c) uTorrent Classic
ProductName uTorrent Classic
ProductVersion 3.2.0.06206
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 2,185,992 bytes 2,186,240 bytes 6.54 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 553C4157279A5432141CDC955498DDA2
.rdata 0x00217000 567,514 bytes 567,808 bytes 5.54 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 543B65EE9617C24AF13E1B26FEC1B7CA
.data 0x002a2000 69,748 bytes 48,640 bytes 5.04 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE DB5CE801FA613E9B92DFBA96D0CA5EA3
.rsrc 0x002b4000 1,516,936 bytes 1,517,056 bytes 7.60 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 185E8CE315795A0D511095040B6570A8
.reloc 0x00427000 175,176 bytes 175,616 bytes 6.57 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 3CE6852D247B672ACBDD784A445DE98B
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 779 (1,429,300 bytes)
Resource Type Count Total Size Percentage
AFX_DIALOG_LAYOUT 16 32 bytes
0%
IMAGE_BLOB 1 10,200 bytes
0.7%
IMAGE_BLOB2 1 22,500 bytes
1.6%
IMAGE_BLOB3 1 24,656 bytes
1.7%
LOCALE 5 21,095 bytes
1.5%
PNG 553 1,012,317 bytes
70.8%
STYLE_XML 5 83,741 bytes
5.9%
RT_CURSOR 28 8,496 bytes
0.6%
RT_BITMAP 46 158,460 bytes
11.1%
RT_ICON 17 51,730 bytes
3.6%
RT_MENU 1 284 bytes
0%
RT_DIALOG 38 18,954 bytes
1.3%
RT_STRING 30 12,804 bytes
0.9%
RT_GROUP_CURSOR 27 554 bytes
0%
RT_GROUP_ICON 5 268 bytes
0%
RT_VERSION 1 628 bytes
0%
RT_MANIFEST 1 2,032 bytes
0.1%
None 3 549 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Product uTorrent Classic
Description uTorrent Classic
File Version 3.2.0.06206
Signing Date 09:03 AM 06/20/2025 (13 days ago)
Verification Status Signed
Signers BitTorrent Inc; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4
Counter Signers Sectigo Public Time Stamping Signer R36; Sectigo Public Time Stamping CA R36; Sectigo Public Time Stamping Root R46
Copyright (c) uTorrent Classic
Certificate Chain Summary
Sectigo Public Time Stamping CA R36 #1 Primary
Validity Period: 2021-03-22 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 7A 23 AE DA 53 69 96 0F 91 C8 3E 5C F4 C7 E3 3F
Sectigo Public Time Stamping Signer R36 #2 Chain
Validity Period: 2025-03-27 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: A4 29 3B 6E 1E DD D7 A7 34 08 87 AD 7A 4E B7 24
Sectigo Public Time Stamping Root R46 #3 Chain
Validity Period: 2021-03-22 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 36 C2 B0 BD 7C 1B 3A E7 A3 B3 DD 36 CB C9 75 68
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #4 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
BitTorrent Inc #5 Chain
Validity Period: 2024-05-20 00:00:00 → 2027-05-19 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0F 47 C9 65 1D F9 99 BD FD E5 5C 27 86 BC 0B AA

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
16 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware