home

bctrl.exe

BitDisk Pro

QuickTerm West GmbH

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘BitDiskControl’.
Publisher:
QuickTerm West GmbH  (signed and verified)

Product:
BitDisk Pro

Version:
6.5.0.34

MD5:
17239efd246566799a96e1bcdc6f740d

SHA-1:
53b59fa12220cd4a1286206067889e070dfb2d70

SHA-256:
de8734409815cff39e71e8ba666ff1d4b9a0ca4972e5aea9f332b0ddae3ec022

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 7:43:51 AM UTC  (today)

File size:
4.6 MB (4,775,848 bytes)

Product version:
6.6

Copyright:
Copyright © 2004-2011 QuickTerm West GmbH. All Rights Reserved.

Original file name:
bctrl.exe

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\Windows\System32\bctrl.exe

Digital Signature
Signed by:
QuickTerm West GmbH

Authority:
GlobalSign nv-sa

Valid from:
11/29/2010 5:31:10 PM

Valid to:
11/30/2011 5:31:06 PM

Subject:
E=d.lohr@quickterm.de, CN=QuickTerm West GmbH, O=QuickTerm West GmbH, C=DE

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012C988C1D88

File PE Metadata
Compilation timestamp:
1/15/2011 1:27:09 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:/ZZQsrfvdCcCfubkdTH5MzYU66smkdTH5MzYU66sS97v4fkXdmTOVwdteOlSgHPk:RZtfFCcCfuATZMzELTZMzEBqwJvH+KaH

Entry address:
0x1273C

Entry point:
48, 83, EC, 28, E8, CF, 03, 00, 00, 48, 83, C4, 28, E9, FE, FC, FF, FF, CC, CC, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, AD, 9C, 01, 00, FF, 15, DF, 1A, 00, 00, 4C, 8B, 1D, 98, 9D, 01, 00, 4C, 89, 5C, 24, 58, 45, 33, C0, 48, 8D, 54, 24, 60, 48, 8B, 4C, 24, 58, E8, 59, 04, 00, 00, 48, 89, 44, 24, 50, 48, 83, 7C, 24, 50, 00, 74, 41, 48, C7, 44, 24, 38, 00, 00, 00, 00, 48, 8D, 44, 24, 48, 48, 89, 44, 24, 30, 48, 8D, 44, 24, 40, 48, 89, 44, 24, 28, 48, 8D, 05, 58, 9C, 01, 00, 48, 89, 44, 24...
 
[+]

Code size:
73.5 KB (75,264 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
BitDiskControl

Command:
C:\Windows\System32\bctrl.exe e


Scan bctrl.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.