BitComet.exe threat report

MD5 9f8cbb26302e90adbe876346e87fabcc
Latest seen 2024-12-11 23:01:06 (a year ago)
First seen 2021-05-21 20:19:33 (4 years ago)
Size 22 MB
Publisher www.BitComet.com
Product BitComet 64-bit
Signed by Xing Wang

This report summarizes the file identity, detection status, publisher metadata, observed locations, and technical indicators for BitComet.exe. ThreatInfo currently classifies this sample as Hijack.Explorer.

GridinSoft Anti-Malware detection

GridinSoft already detects this file

The latest ThreatInfo record shows BitComet.exe detected as Hijack.Explorer. You can download GridinSoft Anti-Malware to scan the system and remove this detection if the file is present on your device.

Detection name
Hijack.Explorer
Last analysis
2024-12-11 23:01:06 (a year ago)
File hash
9f8cbb26302e90adbe876346e87fabcc
Download Anti-Malware

BitComet.exe is a Windows file recorded in the ThreatInfo database. It is associated with BitComet 64-bit. The reported company name is www.BitComet.com. The current detection status is Hijack.Explorer, based on the latest analysis from 2024-12-11 23:01:06 (a year ago).

If BitComet.exe appears on your computer unexpectedly, treat it as suspicious. Check its location, digital signature, and recent system changes before allowing it to run. A full anti-malware scan is recommended when this file is detected as Hijack.Explorer.

Product Name: BitComet 64-bit
Company Name: www.BitComet.com
MD5: 9f8cbb26302e90adbe876346e87fabcc
Size: 22 MB
First Published: 2021-05-21 20:19:33 (4 years ago)
Latest Published: 2024-12-11 23:01:06 (a year ago)
Status: Hijack.Explorer (on last analysis)
Analysis Date: 2024-12-11 23:01:06 (a year ago)
BitComet.exe detection screenshot

The screenshot is a visual record of a GridinSoft Anti-Malware detection for this sample. Use the hash and metadata above as the primary identifiers when comparing the file on your system.

Signed By: Xing Wang
Status: Valid

The signature on BitComet.exe is reported as valid. A valid signature helps confirm publisher identity, but it does not automatically make the file safe if the installer was bundled, abused, or downloaded from an untrusted source.

%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%

ThreatInfo has observed BitComet.exe in the locations listed above. Files found in temporary folders, user profile folders, startup locations, or unusual application directories should be reviewed more carefully than files installed under a known program directory.

55.6%
11.1%
7.4%
7.4%
7.4%
7.4%
3.7%

The strongest geographic signal for this file is Hong Kong with 55.6% of observed hits. Geographic distribution can help identify targeted campaigns, regional software bundles, or where a file is most commonly reported.

Windows 10 96.3%
Windows 8.1 3.7%

The most common operating system signal for BitComet.exe is Windows 10 with 96.3% of observed hits. If your system differs from the common profile, check whether the file was introduced by a specific installer, archive, or removable device.

BitComet.exe is identified as pe for 64 systems. The subsystem is Windows GUI. PE header values are useful for triage, especially when they do not match the expected publisher, product, or release timeline.

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x0082f164

PE Sections:

Name Size of data MD5
.text 14202368 4ad4c8ebf558c6c1e6547f826b8b7949
.rdata 6518784 fc6993ce412d1dcd14f454499fd0e8d3
.data 449536 ae2bbfe633eb96ed79905a8e91ed3879
.pdata 587776 7d0f187e43600b7dea332ceb607c60a2
.detourc 9216 6451fea72106db038675ee71f31e559a
.detourd 512 edda25907019e5cc74c177f6952e5e4b
.rsrc 2001408 83b1fef4c0f39686818178e6730df6e6
.reloc 301568 c62c451a3c2e250a9f429da8812db950

PE section names and hashes can reveal packing, injected resources, or unusual build artifacts. Sections with uncommon names, very large raw data, or hashes that differ from a trusted copy deserve additional review.

More information: