» bitcomet.exe
Overview
Analysis
File Details
Behaviors (3)
Programs (1)

bitcomet.exe

BitComet

Shuang Wu

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘BitComet’.

File name:

bitcomet.exe

Publisher:

www.BitComet.com (signed by Shuang Wu)

Product:

BitComet

Description:

BitComet - a BitTorrent Client

Version:

1.36

MD5:

efc5325f0587a498fb39d0be716c50c8

SHA-1:

fd493e8d934886231e7223f895781b37d5a8c5f8

SHA-256:

3640cabb0cb4dd06d009fc2dc544f44f3738be687bea39172f2dacd11dcbd1a5

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 4:09:05 AM UTC (today)

File size:

12.2 MB (12,805,888 bytes)

Product version:

1.36

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Shuang Wu

Authority:

The USERTRUST Network

Valid from:

8/30/2010 3:00:00 AM

Valid to:

8/30/2013 2:59:59 AM

Subject:

CN=Shuang Wu, O=Shuang Wu, STREET="4 Floor, No. 1118 Yu Yuan Road", L=Shanghai, S=Shanghai, PostalCode=210050, C=CN

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

1CCFA257A1CCF9E9400AFEA2EEC98175

File PE Metadata

Compilation timestamp:

5/2/2013 7:02:45 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

196608:DWBYoG8nBr9EDH9t6Aedt+OxIwSHJ3sFqV86p/kDDxL:KylIG79Ixt+/d3sF686p8DDxL

Entry address:

0x5FF214

Entry point:

E8, A3, 24, 01, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 57, 56, E8, D3, D3, FF, FF, 33, FF, 59, 3B, F7, 75, 1D, E8, 41, 5F, 00, 00, 57, 57, 57, 57, 57, C7, 00, 16, 00, 00, 00, E8, A0, D5, FF, FF, 83, C4, 14, 83, C8, FF, EB, 34, 39, 7D, 0C, 74, DE, B9, FF, FF, FF, 7F, C7, 45, EC, 49, 00, 00, 00, 89, 75, E8, 89, 75, E0, 89, 4D, E4, 3B, C1, 77, 03, 89, 45, E4, FF, 75, 14, 8D, 45, E0, FF, 75, 10, FF, 75, 0C, 50, FF, 55, 08, 83, C4, 10, 5F, C9, C3, 8B, FF, 55, 8B, EC, 56, 8B, 75, 08, 8D, 45, 10... 
[+]

Entropy:

6.6053

Code size:

8 MB (8,432,640 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

BitComet

Command:

"C:\Program Files\bitcomet\bitcomet.exe" \tray

2 Windows Firewall Allowed Programs

Name:

D:\Pr\BitComet\BitComet.exe

Name:

C:\Program Files\BitComet\BitComet.exe

The file bitcomet.exe has been discovered within the following program.

Mozilla Firefox 21.0 (x86 en-US) by Mozilla

Firefox 21 was released on May 14, 2013. The Social API now supports multiple providers, enhanced three-state UI for Do Not Track (DNT).

www.mozilla.com/en-US

9% remove it

Scan bitcomet.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.