How to remove BitComet_x64.exe

BitComet_x64.exe

The module BitComet_x64.exe has been detected as Adware.InstallCore

BitComet_x64.exe

BitComet_x64.exe is a Windows file recorded in the ThreatInfo database. It is associated with BitComet 64-bit. The reported company name is www.BitComet.com. The current detection status is Adware.InstallCore, based on the latest analysis from 2022-09-22 23:25:58 (3 years ago).

If BitComet_x64.exe appears on your computer unexpectedly, treat it as suspicious. Check its location, digital signature, and recent system changes before allowing it to run. A full anti-malware scan is recommended when this file is detected as Adware.InstallCore.

Product Name: BitComet 64-bit
Company Name: www.BitComet.com
MD5: aca16c355a0dfa40b5a852f7fbb9e721
Size: 23 MB
First Published: 2022-09-22 23:25:58 (3 years ago)
Latest Published: 2022-09-22 23:25:58 (3 years ago)
Status: Adware.InstallCore (on last analysis)
Analysis Date: 2022-09-22 23:25:58 (3 years ago)
Signed By: Xing Wang
Status: Invalid (digital signature could be stolen or file could be patched)

The signature on BitComet_x64.exe is not reported as trusted and valid. Invalid or suspicious signature data can indicate tampering, repackaging, or an unrelated file using copied publisher information.

%sysdrive%\bitcomet stable (build 1.87.3.28) 比特彗星全功能解锁豪华版.7z

ThreatInfo has observed BitComet_x64.exe in the locations listed above. Files found in temporary folders, user profile folders, startup locations, or unusual application directories should be reviewed more carefully than files installed under a known program directory.

100.0%

The strongest geographic signal for this file is Taiwan with 100.0% of observed hits. Geographic distribution can help identify targeted campaigns, regional software bundles, or where a file is most commonly reported.

Windows 10 100.0%

The most common operating system signal for BitComet_x64.exe is Windows 10 with 100.0% of observed hits. If your system differs from the common profile, check whether the file was introduced by a specific installer, archive, or removable device.

BitComet_x64.exe is identified as pe for 64 systems. The subsystem is Windows GUI. PE header values are useful for triage, especially when they do not match the expected publisher, product, or release timeline.

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x0088a934

PE Sections:

Name Size of data MD5
.text 14742016 c87f119c27f7243361d9a769dd7ed845
.rdata 6770688 8da68e2657d1ab07a6c18799014da35d
.data 445952 063b3335a8d1715c5075f19e8901a782
.pdata 609792 022d4c3591cfcedd85edcdda4eb7c6be
.detourc 9216 c8b51a005f1d6a0d370c4d314f265bcc
.detourd 512 edda25907019e5cc74c177f6952e5e4b
.rsrc 2024960 21e9e496bc014cb11a44684040ae432e
.reloc 314880 8d957d119cee37ca99feda2b708a8120

PE section names and hashes can reveal packing, injected resources, or unusual build artifacts. Sections with uncommon names, very large raw data, or hashes that differ from a trusted copy deserve additional review.

More information:

Download GridinSoft Anti-Malware - Removal tool for BitComet_x64.exe