home

cometbird-3.6.16.win32.en-us.20110325162526.installer.exe

CometBird

CometNetwork

This is a self-extracting archive and installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
CometNetwork

Product:
CometBird

Version:
4.42

MD5:
50b6abe0f36802345e0daed2333df528

SHA-1:
baf6e6041977c9874fd4aca7315de6caff8f70cb

SHA-256:
57526ff51da4341281ac0b1f07eafeab15f014313baefdf1e0e7c9dcd84be753

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/25/2024 12:18:45 PM UTC  (today)

Scan engine
Detection
Engine version

ViRobot
Trojan.Win32.Downloader.45056.QG
2011.4.7.4223

File size:
8.6 MB (9,006,386 bytes)

Product version:
4.42

Copyright:
CometNetwork

Original file name:
7zS.sfx.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\cometbird-3.6.16.win32.en-us.20110325162526.installer.exe

File PE Metadata
Compilation timestamp:
8/16/2006 12:27:50 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:UrYOUw1vPCHnX8Ub6TS/EwBlYdqr3DwEzxfSKVhoS7ZrIza4HvLev:UrYOU0PTsKIEklsS3UEfSG7FrCayvLM

Entry address:
0x21D00

Entry point:
60, BE, 00, 80, 41, 00, 8D, BE, 00, 90, FE, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75...
 
[+]

Packer / compiler:
UPX 2.90LZMA]

Code size:
40 KB (40,960 bytes)

The file cometbird-3.6.16.win32.en-us.20110325162526.installer.exe has been seen being distributed by the following 24 URLs.

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1458108956&Signature=EJvYcZsy0BHP~eHWvwQplrjttGE2QaPEsBdm64pxF-Rif~WN8p2QZh3zrrZcqIoTPOVL7PsvXnhK1SPIeOKUIWgxb9suQ0AwtKgA9VSsznJ-8QPqn6-mAak1NRD2rbs2b3JZPIC~GIRcvKLZjBRVV1GjbV24ZaTCeiUQogyKqtw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1459912073&Signature=Y~U~wWuOM7Z96Ipt-uqo3S8jD-vkA3kEl7PeaI-UrYw3qJYxeTeX3jK8puFGF6dg5iygIVfXsCG6T3ANav6GvRa~vfe81aT4Ar2VGW2gmmEz5GDkfTU2BDsLZtL7vSiyhm8kkDhNHl5Xw9CcXce5omxWMPzs-ZHX8Xqncm7cWOA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1479709229&Signature=NO8VUk583LUBp9gmUgqeJgK6r2bd9Nb3U-LOydEImF0bRTcKCKwY8vdpi-4g0Fjj3lS5ZDj9YN35K3NsaFbfYDfrGTCpLcjKvjvL-b6IPE6G3BqRAOiwVwgqVTtsEilNUuSUhSKnWjhZ2YAQSc-rCrW4TAhqptglsYjucR5TveY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://www.bitsfarmclean.com/Tp1Kei01Ms7z3XxKQw8RZX1O0oqztwms8VJinx9gpCfDHvg2n5Z6jj5DAX3b7WyTNvfQUNMZuJgsXjS0646cv_bHjmvKfXRb4jMYhE0OHAUR6_JGRI_aj_BdyGphJQW1ewaKzJc bdOop9s2Q9CoEgzOf06UpIZRhH2bzgdMuzQznBpfnXdmBhW5eotr5 sBtybCC75 -G1AAAGRwXmuLOpGIUADABhy4BJStgw5ow8bY D4Rqv1975dAv3BY162ei1JkCG3urTxh8zf6datOJHq5SPND bGPVQT0bZZtAhqVMLzIExEzGA==

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1460623494&Signature=eHrKr9JkRysTBydCJ5rPi6VOSOVk7Kye0vJyY6XLk1sKNu8AMn3Cf1-WF8eIfHRPYjG1OFIFYiQVjsXhWpJzwZ9nSYo9MeOVzvjDvReKBRoYJY6REC~FJLpD2D1qDhH2OVz4j3SwUfXdJIqxkGlOOuIn7xsQcVdUl06R3~dID8k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1477603241&Signature=U~CV8BApdN6O5R3L3sFplQMxQHfsHfQCS~ycaQk9k92vcpHkatgmsUYw5mF306szpjPTj9D~IkFghBOhXoh5IRQUSSicwJMDeZBxnbGXIQ28vG~-wn3pF9hu2XGVen0XoyHBDh0ak4RCZwumBe1wHk7Epj8u3gHu5HPYIulX6Wc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1470589801&Signature=BxtmA4sXFTShi4jwNWubsciqOqD~ydosILg~35VOq9EjWxsiZYsLnBfTtkyVhmOnT-JN6EBRbFYAjWNWfwtdy5TxSIp9dC6teH2VsOSEmPLK2ZUaAtDUOua78HVcorRWNKwfV-i-6iK0JglqBRct6OTpVouqZ7dukBijccA4e78_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1476943380&Signature=LVwCBNrdQq00QEngNO9WL0zy8Drg9ZOqePJestagkzhLhlwyW16akg~C~HOdy3qKmNWvvD4dY5XZUbVkzkR7cfGyxLtVMGvcJ5dOP-BhUpb7JBDFCc5cbypJy4-abfQpkgfg9qAvPAuzuaNhQnBYhP3eiS~BtcDXW1MmQgcAxuQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1430341478&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=agN~gs4Ni48ylPt-qTpWoLaLrykHQUNRiiMZUgrIpGWvQsT1KJ-IqerizOikwvS2uPzrCFwKF2U5p3Oj7lfv29MEjz6sdA6HDztJ4W9I-kfAOyWph4eT24sgt7Qf4yZNpTGh44FnriIHxb2Nig27SaSCcUCWE23imkaRoEn6PLE_&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1462658538&Signature=af2Yy-c9FnGA0lqmLLDQYupQhwKAR75-R2Q4P8~nsGcK04excv8gDI0jWwSge30-WhuQN0q18phGxQTVdmrjBlptjAHTy2aTF1zkR~ssCStIfd1ZmprvANtaGoRkUvGo2KBE~HXmqS6B~OCPHwVkKm4dzVZjfrFpq4pHv5~7rNY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1458862373&Signature=KeatuIvpMGfoOlhWly8xHR6v6zERseD5fEl2DYOON55YPwZxqWPYqYkzHISNTFKN5XHauNXnjJuxYsbEtc9CDSHyRsdU2petQA6HW2u8p06bSUljyRj2tRjwQc3fHJeHue36sdAVNUzA5Ntcyc39UCxCiTUryuGxD9Yre1IYcIo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1467661443&Signature=QhTd4zH385KVyOPcbMHRMEXHGYzP4TfHOkqW8DLsziL1DebrxZePlDP2cz9ZXhUTNGvyt37PfGa~-Kkk8k2Mfr1WdAZ6vKvycnVurFpSz~kpjJwU3v1YFMfj10-G9c5a8W9nMfIXCuvO3lILWLXzPpD2J5WbzucK4HI-76FztL0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://dox.abv.bg/.../DownloadFile?eid=83354101&sha=0&m=

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1466539592&Signature=Jx3PzWKyrwEhmkgGHJgDStSvDeFiAc7YSw6rw~iSy9ggR0Aiu8tM5Yp-HcmGWBeHCnjinqXKfppfWLlz50I-g0nRbwsp1kQEtP1F09ycEFFOEkhIIBePOXdhvTyLfII8MMl8Tl~laMcu1dvIB900VgcH~Xmnr2fJQcei~smiUDI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1446829873&Signature=WJJvm6lHoZKlYbpsN9ImlII5Z8qXnGCkeAHJXkXK4nuzEwQd-i3oIr7Y2FJf3y7tV~oefg3463cD-j8i-FL3GmvVrCzy~0Oi1UotneGiXXPqwtUSiXUjNcltkyGYPQLWi1WPCLxdy3yhTKt1jv4t4D8rWIx~0qDpDU0JxliEvpM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1463803126&Signature=G5OYsowLjIcKRXij75kACQNxr-68BCaX1C6qys04e7i0M9aOI2-bnvf3YPAhAPqyQQYOQn13~j2znOYvGeMiqo0EJnrJm36jIOhWtpqO0VokS5Ezy-g79y5CXOrrJIwII5t0hAX0NEOSQppj~WkzAitp1PTVzwmHRAasJaczilo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1463289895&Signature=ZZL-p~JNutESoYEzVbPLHkw9EKqsleXeh2wm8YGMJF2bPO9xdwNAx6mBD77aRpMNyDsE5ZQtaLQTsvBkhk~8~hXvCNghg8hKLJT0mPowN57QI6tNU9fUYFDukoJeKYa-b~1VAz59-xTxpC7YF6rrsZCDbxFjBPoMN-AO7~-1xPk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1460554957&Signature=BwHinAQ~ycbxoGjZj75eG09Y~2X3GJePGaA0bj9HJ6Z7rmR8JfGl6vD-GQ60Ge~9yn15cAK2JWJ6kcUfgU80ldWahRREhtdZL4xiEf96jC7YjA1bNdIX~cvoKjQDIXBHjWwbsgaNMmGes8ZYF5O8SCHdCWYsxkAVmz~R~6sY4rY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1461318220&Signature=JUGxDSm37dNgDOWYqtNXEWXbhTPPIpL3JXq5eOH0L3wfstyEi8L9AiFKmbDL7g2AsIj00LZIEj50QPDyixxkAzTMPlOEATwQ3S8dxvwA-ZsuPSHhtdAtUlJCDJOJ8Nx2DA4zAFKMKEAINDh4xMcBEELnITHxeaLBQOGPc40266g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1448692343&Signature=dhYOfw8m7J8hll4MzqEaRiks0Lb8tK5Naz8Prf5BSYDhFuZMQm9oozgTm1vs43efHMzgWpimIyuhYkRwDjjlNrco0ngxf2LrTaBnnQbT9oP0X0LlvBz6z9fXz-mb3gFzupjU0sikOv5VDVUZLJn8myg3C9WVsdoji9n6s9vU8vM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1455355798&Signature=K~aFcwr~4p~Wupxqz-wgfb2tDq4Bnk6ZIopWYZ~CsE-iRLXT8OinGjrfCfClNI8hjGLrYNeDaMy3zZcGhxkL0PMiBe2mRdh~StfOVWIZa4FvWw3eKWfjDEekNlY~ZlFs6cgIKnada9KBm0GGxdWVW73TvoWMSittHqu6a0z4PrQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1455392000&Signature=JNgjXsRP5KMxcyTAwCzB01oPNRI6R0fEmbjQOM3VUhfNvBqthcBhySSUo1uUiy-1CwmREuX-1VGhhWKMVpbiJAQeS4qeylQLp0g8aGq1oRlk7bO7AuXwszBrMauP3yKIHvYhH944ZHXgDSeMAhi2d94Cgf7bytIWfE2MIHsbxnE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://gsf-cf.softonic.com/baf/6e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=83960&instance=softonic_en&type=PROGRAM&Expires=1437885837&Signature=LWb~1qqv2NU2fX29fWOxQxWgem5zryjaZfIpBlQ~Aa7XO6jUd4mfOgcU4T6xLbAtDPx96-6XQqcPxuMW5QSEniawFGSIzKJ1U0JExZrP5OxaPZX~AXVaM669bZuFcjqDd58hlRtjgHEkk4fU9cewCMrEDP3Zo6M-s5IBtDLxpOo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CometBird_3.6.16_en-US_setup.exe

http://download.cometbird.com/.../CometBird-3.6.16.win32.en-US.20110325162526.installer.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.