File Name | uTorrent.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
|
Scanner Version | 1.0.214.174 |
Database Version | 2025-04-16 18:00:17 UTC |
No threats detected by our scanner
Hash Type | Value | Action |
---|---|---|
MD5 |
34af99c9956f974739bfb31e371e728f
|
|
SHA1 |
4348464f1c2a6738b85aa9b288a18fb05a515871
|
|
SHA256 |
e03ae3c4f36d846728792117524292b12a6b50e6313217785b0d41cf7d29c2c4
|
|
SHA512 |
c78ccede87de04327c9c1920eb1eab65d7122f3e00638bd885c79c5ed7c65bf1a3ce439f23d72bbf037e94930593fcb54c5e3b00bb163d9c47bcf31e76a5718e
|
|
ImpHash |
339ea40e031bd645aa3bcf529b320530
|
Icon |
Hash: 0f7354712687fc97aa4c12cf06a41ba6
Fuzzy: 7f9d2d37d5dffecbedc00aee559479af dHash: f0cccecc9cf8f8f0 |
Image Base | 0x00400000 |
Entry Point | 0x00cf6090 |
Compilation Time | 2025-01-08 02:07:49 |
Checksum | 0x00390597 (Actual: 0x00390597) |
OS Version | 6.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
|
Digital Signature | OK |
Imports | 20 libraries |
Exports | 0 functions |
Resources | 316 Resources |
Sections | 3 Sections |
CompanyName | BitTorrent Limited |
FileDescription | µTorrent |
FileVersion | 3.6.0.47196 |
InternalName | uTorrent.exe |
OriginalFilename | uTorrent.exe |
LegalCopyright | ©2023 BitTorrent Limited All Rights Reserved. |
ProductName | µTorrent |
ProductVersion | 3.6.0.47196 |
SpecialBuild | stable34 stable |
Translation | 0x0409 0x04e4 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
UPX0 |
0x00001000 |
5,861,376 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
UPX1 |
0x00598000 |
3,543,040 bytes | 3,539,456 bytes | 8.00 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
42448716D3F679912BC2AFA44C1C46BB |
.rsrc |
0x008f9000 |
126,976 bytes | 126,976 bytes | 6.99 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
2DA563AFEC9F9F7DA06CDB11E5C41C9B |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
1 section(s) with elevated entropy (≥6.5) - possible compression
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
CSS | 2 | 2,142 bytes | |
GIF | 1 | 3,208 bytes | |
JS | 5 | 36,594 bytes | |
PNG | 32 | 159,453 bytes | |
RT_BITMAP | 4 | 20,506 bytes | |
RT_ICON | 77 | 542,167 bytes | |
RT_MENU | 1 | 88 bytes | |
RT_DIALOG | 125 | 39,606 bytes | |
RT_RCDATA | 1 | 710,152 bytes | |
RT_GROUP_ICON | 64 | 1,462 bytes | |
RT_VERSION | 1 | 840 bytes | |
RT_HTML | 2 | 1,910 bytes | |
RT_MANIFEST | 1 | 1,835 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
OK
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important