Gridinsoft Logo
File Icon

The utweb_installer.exe (u Torrent Web) File Analysis

Updated 3 months ago
Checked by Malaware Check
utweb_installer.exe

Technical Analysis

File Name utweb_installer.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
98304:EjYWohHX+t2Kz3lrxAE+IbvT3916GFLOAkGkzdnEVomFHKnPzi:EjYWqX+nF3916GFLOyomFHKnPu
Scanner Version 1.0.207.174
Database Version 2025-02-15 06:00:50 UTC
⚠

Suspicious File Detected

Detected by 7 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
10%
Detection Rate
4,570,624
File Size (bytes)
7/72
Engines Detected
2025-02-15
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
6a2b68a6587e292da47cb2943d83d534
SHA1
20d164015a691bdfbdefda52699191567de47fdb
SHA256
ef84a998fdc17cc0cf630e8e00586d6bc2ade522c21686053d026b6649d5115b
SHA512
8d0318504e72e5f139ef27c667ed4752eb7573d12e2de02850d81138f608156eec49a31c74aa24858c9b1d2149eda0d13606ca0209b116e7c4e7362dc6eb8950
ImpHash
b48ec932e0b94d3910a5e2592ad0d9cf

Security Engines with Detections (7 of 72)

McAfee
Artemis!6A2B68A6587E Malicious
ESET-NOD32
a variant of Win32/CppInstaller.A potentially unwanted Malicious
Google
Detected Malicious
Ikarus
PUA.CppInstaller Malicious
Cylance
Unsafe Malicious
Fortinet
Riskware/CppInstaller Malicious
DeepInstinct
MALICIOUS Malicious
65 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 5e6a7733b02558b5879c56f8acc3d41b
Fuzzy: 1dde4aabaa84326c897fad312ce50bda
dHash: f0d0b2336286c460
Image Base 0x00400000
Entry Point 0x005cc6df
Compilation Time 2024-11-26 09:12:30
Checksum 0x0045fd23 (Actual: 0x0045fd23)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path C:\Source\Repos\DS-Platform\CppInstaller\CppSetup\bin\Win32\Release\CppSetup.pdb
Digital Signature OK
Imports 21 libraries
Exports 0 functions
Resources 793 Resources
Sections 5 Sections

Version Information

▼
CompanyName u Torrent Web
FileDescription u Torrent Web
FileVersion 3.2.0.11263
LegalCopyright (c) u Torrent Web
ProductName u Torrent Web
ProductVersion 3.2.0.11263
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 2,194,144 bytes 2,194,432 bytes 6.55 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C9F6F358F63EA748CE8D710838066721
.rdata 0x00219000 567,974 bytes 568,320 bytes 5.55 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1B348EDAABF202E153E70E79D6692B87
.data 0x002a4000 69,692 bytes 48,128 bytes 5.06 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE DF682C1E69AD36BFCF32C628E7178A04
.rsrc 0x002b6000 1,573,208 bytes 1,573,376 bytes 7.60 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FBB1DAD1FDDEDBC1B64926B0D1BE1BE5
.reloc 0x00437000 174,928 bytes 175,104 bytes 6.57 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 42FB3B96FF511CE89B2FDC9CB0B9FC57
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 793 (1,484,850 bytes)
Resource Type Count Total Size Percentage
AFX_DIALOG_LAYOUT 16 32 bytes
0%
IMAGE_BLOB 1 24,962 bytes
1.7%
IMAGE_BLOB2 1 22,500 bytes
1.5%
IMAGE_BLOB3 1 24,656 bytes
1.7%
LOCALE 17 53,632 bytes
3.6%
PNG 553 1,012,317 bytes
68.2%
STYLE_XML 5 83,741 bytes
5.6%
RT_CURSOR 28 8,496 bytes
0.6%
RT_BITMAP 46 158,460 bytes
10.7%
RT_ICON 19 59,985 bytes
4%
RT_MENU 1 284 bytes
0%
RT_DIALOG 38 18,954 bytes
1.3%
RT_STRING 30 12,804 bytes
0.9%
RT_GROUP_CURSOR 27 554 bytes
0%
RT_GROUP_ICON 5 296 bytes
0%
RT_VERSION 1 596 bytes
0%
RT_MANIFEST 1 2,032 bytes
0.1%
None 3 549 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Product u Torrent Web
Description u Torrent Web
File Version 3.2.0.11263
Signing Date 09:32 AM 11/26/2024 (189 days ago)
Verification Status Signed
Signers BitTorrent Inc; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4
Counter Signers Sectigo Public Time Stamping Signer R35; Sectigo Public Time Stamping CA R36; Sectigo Public Time Stamping Root R46
Copyright (c) u Torrent Web
Certificate Chain Summary
Sectigo Public Time Stamping CA R36 #1 Primary
Validity Period: 2021-03-22 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 7A 23 AE DA 53 69 96 0F 91 C8 3E 5C F4 C7 E3 3F
Sectigo Public Time Stamping Signer R35 #2 Chain
Validity Period: 2024-01-15 00:00:00 → 2035-04-14 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 3A 52 6A 2C 84 CE 55 E6 1D 65 FC CC 12 D8 E9 89
Sectigo Public Time Stamping Root R46 #3 Chain
Validity Period: 2021-03-22 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 36 C2 B0 BD 7C 1B 3A E7 A3 B3 DD 36 CB C9 75 68
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #4 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
BitTorrent Inc #5 Chain
Validity Period: 2024-05-20 00:00:00 → 2027-05-19 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0F 47 C9 65 1D F9 99 BD FD E5 5C 27 86 BC 0B AA

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
7 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware