Online Virus Checker | v.1.0.194.174 |
DB Version: | 2024-10-28 12:00:38 |
InstallCore is a framework used by software developers to distribute their applications. It is not inherently malicious, but it is often used with potentially unwanted programs (PUPs) and adware for hidden bundling software with additional tools without clear user consent.
File | BitComet.exe |
Checked | 2024-10-28 10:41:11 |
MD5 | cbb6d49fcb708b9aeb7ba74567091fe9 |
SHA1 | dbde15b4ee94437a82cace375ad1ca55739ad57f |
SHA256 | 5760e7283ea31834aa16976fe052c156c26cc1c2459a043152c06ce2b8a4fd1e |
SHA512 | bee080ec0d335cc1774c05f98e4480fc4d0ff825bfcee3822171adc461023c3f6952ecb064d33b5c8709e520bc8ee29a63e28381f0847aa3919e097586428a8e |
Imphash | d2fca41c9e84b9f5f8a2abb235194346 |
File Size | 28349328 bytes |
Gridinsoft has the capability to identify and eliminate Adware.Win64.InstallCore.vl!c without requiring further user intervention.
CompanyName | www.BitComet.com |
FileDescription | BitComet - a BitTorrent Client |
FileVersion | 2.09 |
InternalName | BitComet.exe |
LegalCopyright | Copyright(C) 2003-2024 All Rights Reserved. |
ProductName | BitComet 64-bit |
ProductVersion | 2.09 |
Translation | 0x0409 0x04b0 |
5771b0fae29f38cac49fcbccd914d4c2 b7621093455d12c52d863db1873a2897 f0f0bed4d4d4f0f0 |
|
Image Base: | 0x140000000 |
Entry Point: | 0x1409b30ec |
Compilation: | 2024-08-20 14:20:48 |
Checksum: | 0x01b0c216 (Actual: 0x01b0c216) |
OS Version: | 5.2 |
PDB Path: | D:\develop\BitComet_2.09\app\Release_unicode_x64\GUI_BitComet_wx.pdb |
PEiD: | PE32+ executable (GUI) x86-64, for MS Windows |
Sign: | An error occurred while validating the countersignature: The root Certum Trusted Network CA 2 lists its extended key usages, but {'time_stamping'} are not present |
Sections: | 8 |
Imports: | KERNEL32, USER32, GDI32, ADVAPI32, SHELL32, ole32, UxTheme, WINMM, COMCTL32, RPCRT4, urlmon, WININET, IPHLPAPI, MSIMG32, SHLWAPI, VERSION, WS2_32, WINSPOOL, COMDLG32, OLEAUT32, OLEACC, |
Exports: | 0 |
Resources: | 154 |
Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
---|---|---|---|---|---|
.text | 0x00001000 | 0x00fdeb68 | 0x00fdec00 | d8172a89727d5a90675aff866ae8297f | 6.52 |
.rdata | 0x00fe0000 | 0x0077507a | 0x00775200 | 18d2dc02f0f2359f67ce82a478659e94 | 5.24 |
.data | 0x01756000 | 0x001d1150 | 0x0007ea00 | 083dd69b886cf0ad13627c0f1e07b3d5 | 4.46 |
.pdata | 0x01928000 | 0x000a703c | 0x000a7200 | 9f3fa5744d00e0e2b55f73dd73a57539 | 6.77 |
.detourc | 0x019d0000 | 0x00002210 | 0x00002400 | cad5d451b901b03dc9c75917f5b6fd70 | 2.81 |
.detourd | 0x019d3000 | 0x00000018 | 0x00000200 | edda25907019e5cc74c177f6952e5e4b | 0.12 |
.rsrc | 0x019d4000 | 0x00234bb0 | 0x00234c00 | 024b004bdc7022110acc023346570b60 | 7.95 |
.reloc | 0x01c09000 | 0x00055a28 | 0x00055c00 | 254fc73b275ac4ccc4bca95c5e1a4feb | 5.46 |