home

bitcomet_x86_setup.exe

Xing Wang

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from download.fosshub.com and multiple other hosts.
Publisher:
Xing Wang  (signed and verified)

MD5:
d40afcc9632b7351191645bc1e13c150

SHA-1:
1bf87d0e194901cd0dbaa7f633dc83dc42c5dc3d

SHA-256:
43bf8dafc7ef5193da42b45c181fddfb7cd650c08fdd38f848ff62e9768b646c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 11:21:25 AM UTC  (today)

File size:
8.3 MB (8,746,568 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\bitcomet_x86_setup.exe

Digital Signature
Signed by:
Xing Wang

Authority:
StartCom Ltd.

Valid from:
11/27/2013 1:22:03 AM

Valid to:
11/28/2015 1:30:30 AM

Subject:
E=wxhere@hotmail.com, CN=Xing Wang, L=Shanghai, S=Shanghai, C=CN, Description=Kk6apq1up6S525U1

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0BF3

File PE Metadata
Compilation timestamp:
2/25/2012 3:19:59 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:DgHgcreh2lB8Rms+zoNYTr0c1S+aa7s5xGYJq53/wCTdH/RME:DgHgcrcRF+zoCv0rYs5EYJqx/wCBZR

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Entropy:
7.9985

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file bitcomet_x86_setup.exe has been seen being distributed by the following 50 URLs.

http://download.fosshub.com/Protected/expiretime=1419675055;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9CaXRDb21ldC5odG1s/39f31f098c2ab57a0c42f6f050aca632179a302bc45e9d5e366199dfd9d2e670/.../BitComet_1.37_x86_setup.exe

http://www.filecroco.com/files/.../BitComet_1.37_x86_setup.exe

http://www.techtudo.com.br/_/software/.../download

http://download.com.np/uploads/DownloadManagers/.../BitComet_1.37_x86_setup.exe

http://bitcomet.bg.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-flqSMpZ6nmZs=

http://123.briian.com/forum.php?mod=attachment&aid=NTUwNnw4MDFlMzVlNHwxNDA3NzczNTQ1fDB8MzUw

http://bitcomet.ro.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-flqSPoZyhkZU=

http://gsf-cf.softonic.com/1bf/87d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_br&type=PROGRAM&Expires=1433862430&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=H5UJjssF56PFSc9TngfVI5BDgzhPRGOQB22o~BwbDZvTWeOEVqUUjkm3DWLmx5CSqCVjQXBlkqxVgwV6hC1JW54PGwNJFt0R9p8jVoKUqq9GfMaiZ5ujZr4P4eekX38IzBgRm5t12NmvOVx~ALxd-yG3PjbBxO~5w4Ggl9aA8Fw_&filename=BitComet_1-37_x86_setup.exe

http://gsf-cf.softonic.com/1bf/87d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_es&type=PROGRAM&Expires=1427060384&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=EhCB9SRDdNx9VjDOLvoIxp43WlVpzbWibdgAdnZK3Ae61ONpMladf6C6Uegdjwg69kiRMy5U4ijzNZsR4m8e97CaxSXZGWCPJ2RFxjBuU~GDLCubLLykY5V2kA~jhSD8cNZcXFkv90fibuSOXpCSlWRn1uPsUZ36m~mLl9yXT38_&filename=BitComet_1-37_x86_setup.exe

http://gsf-cf.softonic.com/1bf/87d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_es&type=PROGRAM&Expires=1423628131&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=dDWapdz1~eHIACmVOH5FYJHYRzC38b1SajWwK6Hc15y-7ttpuEGCt2PGtw28mTZ5I~vEXghZr45D4E-429qLVI~1LiypxPdHFXhXCFEc6uewArPWz6annhJ6Ic8-F3qcNdHBR7bWgtSEGlRXDEvCbEhSWjnZqaAwmsXSFZQQMas_&filename=BitComet_1-37_x86_setup.exe

http://gsf-cf.softonic.com/1bf/87d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_es&type=PROGRAM&Expires=1435063338&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=OJuToTAKneaEyGxu4cceySe9ImHYRcylyFcjqq7XO7itFfpqfexgZkvpZKhWJT3EvO3OnM9S14zZ95nO4EmLp994xkVfjG4ZPKT8WKMmXoxdbJwlUOaWZKQdFNvNCqDMiJpH4QjMXXVhsuQtIAhBTtr8viF1Fmj-6oD88ijyLb0_&filename=BitComet_1-37_x86_setup.exe

http://gsf-cf.softonic.com/1bf/87d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_es&type=PROGRAM&Expires=1424228627&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=BvxtkPoSOlPQbVuUot648nOVqe3K9v22wMUJ~gCAhCtTi6G8SKfY6oh1h5qVJKa6keAVaRvs~y9-TRBjuUTeG~P9FuZUF5YpQrOJa18zVZSnd7IiuUMB19sR1tlj5-TxrfErM2KhGlgsGpq2xv66fRvK6F~wG~pOM2zhGBqub~o_&filename=BitComet_1-37_x86_setup.exe

http://gsf-cf.softonic.com/1bf/87d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_en&type=PROGRAM&Expires=1424467937&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=LwbLThVuJLOK85okxmxOerc2s7jitRxeCGF9nECXbtVwB2SI41dh77G6SJ2livqi1RqGZrxDfTxiDCOzZXwW7Y1CYuVB8QBwHglTlAsrFpznPj1DFJVFI~hX2h66hosYKIOdGTlgBGOE0Q4lbR~gK4FTRiTY43m0TR1X7MqhL7s_&filename=BitComet_1-37_x86_setup.exe

http://gsf-cf.softonic.com/1bf/87d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_es&type=PROGRAM&Expires=1425427447&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=d4g1kmYCq24uV7YHYOyUfjeTON1otftrirUCP0ch-ctq0abYJu9mf~rgFI715qRKwDvAMHvUmEKOk25hcqktiZ9HZrPBm7LE0SqaGzzTMTgJ4CKggM8DPsYLVCSCTAihvZI1yJVYbRTljElMfo93I~sL9bRoA3IoOGzEJ89p1Zo_&filename=BitComet_1-37_x86_setup.exe

http://gsf-cf.softonic.com/1bf/87d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_es&type=PROGRAM&Expires=1435120223&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Ji-wIUVneiv6vMk9AFOAK1zCL6fCYQxs-A~McMqZV08YwfRsU69FivqLBfhu-SsZF7uw30ZAKWOHiazcfqgIbh5V78loAj1GxiuOzWr3q5JPGIxlSDDtp6e9avoHlvhWseBg8OKvJ-eEtc~GBCVpz47JecukpgjuM2FCa1HUQ2Q_&filename=BitComet_1-37_x86_setup.exe

http://gsf-cf.softonic.com/1bf/87d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_en&type=PROGRAM&Expires=1427180748&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=UpjCPh8f2roXF5iD2oJUUCUTOrkWLaTC0g4Z8faJEcKLmaEaTswvPQfSgG9G2Z-tzTpHBHhp0pwP7FZaBvrBaT4lv~dan4UAt6YuAxO5Yt1cFKEIdWkXr3fx4352hHrawnrL2rUzEwyoaQCTW5FxwECBox1jvCcFMD7Bs42V-B4_&filename=BitComet_1-37_x86_setup.exe

http://global-shared-files-l3.softonic.com/1bf/87d/.../file?nvb=20150121095227&nva=20150121215327&token=00f366658320aabc06e70&SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_pl&type=PROGRAM&filename=BitComet_1-37_x86_setup.exe

http://lb.cdn.m6web.fr/d/c/a/64592164b3c07ef925a8c04be013ec3c/54dc69a7/soft/.../bitcomet_1-37_fr_12987_32.exe

http://gsf-cf.softonic.com/1bf/87d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_it&type=PROGRAM&Expires=1435104699&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Bs2VlQFyzEUPgXJZljiihvoHKSNZT9CNM2ls5W2fCxJxluhPD1zVe3AV16CdWpypb8P6ziUSOZZuz8R7janRBCTZcncvDxN86zLzVvHn7Yr5zJ8mu77MC9oH8BggoiGGSXYE3xqX-eWHCT8k-E9rqKOgpquJ060oMxBgYjric8w_&filename=BitComet_1-37_x86_setup.exe

http://global-shared-files-l3.softonic.com/1bf/87d/.../file?nvb=20150115190555&nva=20150116070655&token=064dc902f3dd81132eb02&SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_en&type=PROGRAM&filename=BitComet_1-37_x86_setup.exe

http://gsf-cf.softonic.com/1bf/87d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_it&type=PROGRAM&Expires=1426746289&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=gYXFbkP-vx2wZ~A83NHNOrqS0sLQEap52OpKscINxPRcLtcnEc766EV3xMBTftzRT0p8aeWjvcbJRU66UdFb6O9HHggIU2r5wvKuHF5TUFZksdSOvvgiq4~4v93K7YLoxBrH5~OXJIzlsrmPpWIy-cOfmh8Gz8oOWIO0uKgRJkg_&filename=BitComet_1-37_x86_setup.exe

http://global-shared-files-l3.softonic.com/1bf/87d/.../file?nvb=20150124015747&nva=20150124135847&token=0224c8190691f2fbe66a6&SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_en&type=PROGRAM&filename=BitComet_1-37_x86_setup.exe

http://gsf-cf.softonic.com/1bf/87d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_it&type=PROGRAM&Expires=1426582069&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Do~vyEIA~3PpQcNvUqVJBz9Jbhri~e1u3-mI3oWZNYhxqbN~dASodWAUoRhY6h6gbfL-2OueWd55wpqSqAIKOGlmF-6Q4TtAYFUM7nyWYS~eDBk~MFd~6azWTjnBtx5sMsgQUpfOHxOCxsiClW0~VOd8Xfh~lE1QkNYBo8WBfEg_&filename=BitComet_1-37_x86_setup.exe

http://gsf-cf.softonic.com/1bf/87d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_en&type=PROGRAM&Expires=1422712791&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=ci~GncGP-hNpgMfOiGMobcOZziKetoE6Yv0hkQvbFpobpoUyFck5bCOlQ5Mo21wJt6tn1DNc1mRVZZIbt219s04U5Iwhuv5Yg-v31gYWPCSWG-du9BuIwyy7026NZhobUuFoaN8FwfCsSWxRhQBRi1WQIoyjF8XxsX36gbbKEOw_&filename=BitComet_1-37_x86_setup.exe

http://gsf-cf.softonic.com/1bf/87d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_es&type=PROGRAM&Expires=1423434170&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=W2wKklChhAHVX-8lAMj2ODTnnqhE6BdFzaymkiEglY5JMYNsjghkDkHSpvmjhuF-48ry9ohZqfYxeFWSu2fTE0-OgbieswU4gl8nTWghapDgs~Jbmc0hjVzv0D-dO7pgJ6hPoG-vGKtGEN0zoJ8rqiKo5N6aTyaYcpPeeEiZ138_&filename=BitComet_1-37_x86_setup.exe

http://61.222.3.60/fc6a542fb26ba3aec696e1b9a5bb1546/softking/soft/cn/.../BitComet_1.37_x86_setup.exe

http://my.downfiles.net/1bf/87d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_br&type=PROGRAM&Expires=1430805760&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=GNCG8EpXnIBExrqr1UOAD1i8zhvzIVQ2UEH52fnIVaR8Qn679DGMoHYLctlmkxW5g1mHO5vF6CqACTLy837hn3zZ2222x6Qicoqt3klsori8upPp-FusGRMyTDMdCQ-ic~49putJ-2z9TRN2sdkBAvBmYcaJXugOhNwrhvt4Wyk_&filename=BitComet_1-37_x86_setup.exe

http://gsf-cf.softonic.com/1bf/87d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_es&type=PROGRAM&Expires=1425233920&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=XYJ6mp0Wo~mDPZnWnqzVqTRA2YdQR1Z6wBz8GqON1uGVV1BoRXMkM3bSR4PqAnfpOjuAwpuhljPXEfOnXl1MzXDVPOu4WNGAQpHVg05xWkSPWNCNhOe3O0trk4uomWw9IN6qgPgg9Dl9fdv9Lvk70FOJDVmTayVWn2woqnqHOOY_&filename=BitComet_1-37_x86_setup.exe

http://lb.cdn.m6web.fr/d/c/a/aa0236e0357da4f6c701e9c0dd5d41a0/549592b0/soft/.../bitcomet_1-37_fr_12987_32.exe

http://gsf-cf.softonic.com/1bf/87d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=35799&instance=softonic_es&type=PROGRAM&Expires=1435027203&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=D-hihh~U~UqceDvbrrOk8nT1yMe2cLps1ckEuDP9DD8zGeISlSwsXypF9JwUuWTz4~rsWmlLNmoLp5p3XhOMRWeS8DOIq966It6mImYX~Yn~0mdTRnEnUmRQy3unHDMtM1yvYYt2vk8~kGr1nJxMPFsbts7~Pt4rgzx-RMndU1w_&filename=BitComet_1-37_x86_setup.exe

Latest 30 of 108 download URLs

Scan bitcomet_x86_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.