home

bitcomet_1.42_setup.exe

This is a setup and installation application. The file has been seen being downloaded from download.bitcomet.com.
MD5:
d98a1016f043c5e2112ba44afe72d293

SHA-1:
4cb6b9598e1011af7cb3998d74892476a0abe513

SHA-256:
b12f4f66543563019615bffe8f1202550aded4c7769392b4ea70c41749b26e4d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 3:42:58 PM UTC  (today)

File size:
15.5 MB (16,253,160 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\bitcomet_1.42_setup.exe

File PE Metadata
Compilation timestamp:
4/10/2010 7:19:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:pURfuDRlDtBMz9jds5U6cJhwWV8cVCOdSnVe4reEXLCn5uRz6z29eEBl++zy:p02/BMzgCnJhLV9VC/V3PXLCYMGe2Je

Entry address:
0x354B

Entry point:
85, E8, 23, EF, 81, FB, E0, 54, 00, 00, 71, 0F, 15, 3B, E0, 8B, 4B, 69, D3, 0B, 6C, A1, 22, 8B, C3, 0F, CD, 85, D5, FF, CA, 69, F0, 1B, D2, 2F, B3, 0F, C9, 8D, 05, 8E, 06, 00, 00, F7, C2, AC, 1D, D5, B8, 8D, 2D, F5, 28, 2D, D4, F7, D3, 2D, 32, 0B, 00, 00, 05, 31, 0B, 00, 00, 80, DA, 54, 10, CA, 0F, AF, ED, 3D, 09, 02, 00, 00, 73, DF, 47, 68, FC, 0C, 4E, 00, 51, 76, 0A, 0F, AF, FA, 4E, FE, C3, 0F, B6, C9, 47, E8, 0D, 00, 00, 00, 0F, B6, D4, F7, C2, 36, EA, 3A, 0F, 8A, DE, 3B, F0, 5B, 0F, B7, EF, B4, AC, F6...
 
[+]

Entropy:
7.9996  (probably packed)

Code size:
25 KB (25,600 bytes)

The file bitcomet_1.42_setup.exe has been seen being distributed by the following URL.

http://download.bitcomet.com/.../bitcomet_setup.exe

Scan bitcomet_1.42_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.