home

bitlordsetup.exe

Redobahu

House of Life

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application bitlordsetup.exe, “Redobahu Setup ” by House of Life has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. It is also typically executed from an Internet Explorer cache folder. The file has been seen being downloaded from www.centerfilescentral.com and multiple other hosts.
Publisher:
Cubori   (signed by House of Life)

Product:
Redobahu

Description:
Redobahu Setup

Version:
1.1.1.7

MD5:
5053b0cb782dca31d1b3d81f751e5b69

SHA-1:
581a9e5b5206d914141c669c830324d961b594cc

SHA-256:
5ca181b39a716dbd4c1c2a110826b2285c296ca66b583231ee71e80333849a59

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/17/2024 9:37:37 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.HouseofLife.Installer (M)
16.2.26.7

File size:
1.1 MB (1,165,136 bytes)

Product version:
3.0

Copyright:
Web Internet

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\bitlordsetup.exe

Digital Signature
Signed by:
House of Life

Authority:
COMODO CA Limited

Valid from:
5/13/2015 7:00:00 PM

Valid to:
5/13/2017 6:59:59 PM

Subject:
CN=House of Life, OU=Property, O=House of Life, STREET=Oelnes, L=Sogndal, S=Outside United States, PostalCode=6856, C=NO

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
7D10B220FDFA59C2BD4E1AF300EBA218

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:2tUbpGXy/KbT8n+gKcENBQZJldkgzbYVZ8x3EzgKiaPcttbn0:2ub8UgTMW09/pxUTiaIbn0

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.8749

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file bitlordsetup.exe has been seen being distributed by the following 50 URLs.

http://www.centerfilescentral.com/c?x=xyatIZhdnwOFRleLtz4r2dG UMCLCoFBGyZNmgAsw4I=&c=dchSIC42LEXWxT/2gLJhlnruMAm0cy3dG7nIlpIGVEekonDkzIM0wCIOIspw1HfEYxZSRDB6U 2zxo7pzZfkQopjYDQN7JS32v6slGKiUb tQvws/1OPrxLc9Nux1794&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=W7vTsyAoRCQ4BIGqy5Pjjd2YPu88PmzHdHLW7q0EeHA=&c=4yog2pkL31N0CT4ItpNMKMkBQEGzqu8oU4CV8yDA30gwE18sYj Uh MoMxV1xUjK/cACwABGYnM8oMH/zNsXDsIh8iEsPP6/1ApPhSKpwovClq1apUTlF5Ho8w7ZRBI&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=5/Y7JdTVNqVYsbCnUvCvGNbXaA7t4pp6E9hftfPVSOU=&c=SiSarDChGHrlxZoJTTUxkf22QgXz2UooIGVWS/ymjw0TTqpJdl2Kqypl8Eykzc4cixmsd6PBR4w1ASHC3AvSaxFJPJfj3hHZevEq //dAiiJRVUkbn0gqdrOIurLw/ax&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=e1CmGYGDUXO9yAyO8k0lrkUbTc6/1ECBZ6BMsGeYsAI=&c=NeAzBPSSPBCPnsk2aElKmxuexNYyxMtjg2eGoQki0DTZA4v5bktxej6AWMVS2ExNL0CTXnQoJ4GlQ8Zru8yYbVOEjogBSGv5ckEKBIHDeUHCeniTSIfnbq3zUy9r5/J1&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=KJlQKUpAvP2AOwAJ4SdxSSuZjNVKMpz21dMMBV9XUn8=&c=O5PiPu4nvRIGdqmkZSBBtlOrctsLVUX6l6juaCocu4RlBIg4XYyKXAH3nrda0 OePyqn8VVabb90dkn5lcalx5e6c7NDEy/JK4tIpMDMyv6v27TGMao 6euucKycHatK&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=nAi08YbgqQKUTkqnsy8OUzCJjcOWln3M00RXA4uRI0w=&c=d2 QT2OaCfnnNB4mJUoSYF4MPLbSmXO9eWaW9qhTq0wwCQN7mg3aXjcioP6vzHQUoAlM//4aLyRRer4STIw3LGFoZTCOgjExKh6nxHgbXB5HTK3J3RQCDfxB/fhLy1K6&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=SnUYLudk6c89aObxGUkp3d8OWJo0Dy YNMRdx6U71BY=&c=YVY7 7gixg3QFD8qo9cz1M/mHb5sZqWTbxMQjeprRR6wLej/C9MtIavmmPC2y7/HSc3U9 tCj0dYWMu5kFZTz9PV6z0g8ceZlcte6Y6lPVs6q ePTqT5lFA5W26x0/pw&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=pfx1WdtVUWOTXNrgLwxWi6J2ccJkLxJSceUZ5M0p4ck=&c=GN5AMvbsbijYn/fNKD EZtqPG9DYmn FxVmeEMXD2jeDZWJxfjn50HC3 F4pVPgTLV7NuJF53AL9ufqDdwu654CkLA6gJ3IqnfngaY95n6LkDu84c6cRi2vCNMsWl0y1&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=wMwDKAHvf0M3uDdjEj9zdZD9BLCp03eNZ6QdqahYy9E=&c=U8BjHlXhuScgdKO01IwiiGdKDkagJudh6FdKxT9D10km4XhutXg1iX4lcRmfjY/bsGkF2WqfMQtGhcfPjrc1fqn7jXprSkwxMx5FPcy91ekUwcuD fV70r3Js5f4yb3x&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=dGKE7VPhnP/xMzkuDGndJviUBCPSD7sDIZt sB77OZw=&c=dbmlo8uknhh7I58HpIczewouxJ0 Q1iexGQnLjNfEFb0FQ6PIykng27I98T3yyqJLnc 6tqfNTRmV2ENaIDfD s3M7XYhrkdTBUG6Eh/MtfDY7cAazNYyH/ydN5GBqk0&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=C/dBbOO/5xCHEAXanZkBrGo9CbWuTWS4cKhfbrOlcQQ=&c=H4IcwIoTaaRXb6AY8jcxhI8XIqrHQ2obo yb13W0/ x7/BT98 9lRG nlFPc7MiBziCVG44eRrEn5SQc2Sg3hb9mbcmwjb oS8OBmsuAW iQai80t07RHDtgidqGRC6A&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=GcaFE6OkGrK4eHW6E46jf5LKot8XD/L5xGUgQanIwyo=&c=WmSPE5NZe4VrKf4lFjBKGujmk7SxKIxnH bhENBadnWwWGiwitd9aZua/m9Ga4zsN38GokC1WfeHXQr3ysmRjqdDXOr97hYk5CjbP/wMJVz9e0vl1kNNsEIyEoAefIx9&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=z2f7G8FUAa6Hys6F0l2JteJtc3KR7REw5REqah8sPGw=&c=2iQrXg0bsN//8A4Wkdqibh46r1L87ww2sHW8q 1Py01h6vR3urHmzZ85yV/sNBdaEMgUtt2g0ZO5fbvxWWwVDtv8m19tw6o8GIZjaWJWAC0rAKBs095hkelmk6zTvNXu&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=e6GtCQV elYjL TzPrq/m QdH9cDhiLGy20TjaNVefw=&c=0Wy9ETNFH3aH6LKlcMqPB4uzG8PyI8fYZaB0XPDDd5polTbOKsMOco86mwQbWjOR6MKJvemtCTlRfhEQwrVx9T96HCv69ptAWZ5 KPFLv1dRBRsXq7kkmFRqjMKVfOZN&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=szY9C8yod5saT5ucT2Qgghh1RUiHOm8Ai8YyLlWGi I=&c=0YPBln12U2XVQiIYe0gMoMGAZbx1l4gyyYSu/NP9inZKA2Gc1glU/SD1ElIhbvuGMDugm/g/aFgM0FDkU 9PqZXJQkstX/iSVTn6qf6 POPRqAoSRIZKoZRiXDn5m37&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=VKHKzMS4 BXwc1yAkWqUHt4MT2VL1OXpzFxruI6JWL8=&c=p4pn93anu0liEfI8ywROv0WWQ1a2eWrRGCIoePS421g3Pqe1ncBbhp6Zcq96XnEalNFqxIJngdGLCCUbPUjFeCPmyb/dP/PfcG9cbcI pBco33 EuToaYRu2XAkqgizA&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=cMEeUKUAvo2QSpF8/h7dpaI2nwxVI5v7RDAbZdnRIeQ=&c=Huj2lCDz/WDMk0RxmMF/BV6 78hlCs1P0p40 NJyQHnEcpC2z7nwd2bxMPpMsNZZDmSA0UYDDctwXAL5xdXpJlogrkcMWJXvoB7nMwj6jxtzEKJNaZ4M0NEofdeW2i1q&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=ByhtyubewU6f7LLnCBvrnUnouwSwWIaOJl3KWI0l /g=&c=s7hMP5IQa6dcJfdq5DrEoPguRw08Df36tlmZBxYpbSTsbUD2F/uzSoZRVXsgjWWQcWS/aM6ukw1EoI i TD3JmZMFiWGq/DFWMhFArEpzwPe 9H4yTqK9PkXJv2qKSO8&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=pCbh6o2W8rlJw7ql1sQryuQHpXrrp9 Z6SAPYTkWWjw=&c=ORCA9U7h5 OyvCIVFIV7AqrJUI x19XBRbpiWvHseDd9zrWaHyXzXzUmTasIP4QID0snKsOrGstpDCyBTEzbUMI4oWW9XW9kglmhwTVkxTIJYB0TR/lcouhSkdDh/7jl&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=peh1MKg4kqXUXV4PbToeshd5vIMDpPplePfoS 8Ei9o=&c=zFTxQzw D1jnZkRW1N5xBDBsJ4eU T94DW6M5nOk wbShrBPvhkyzyhtjEybd wSXM0rhe4D/JN38yPz7Xv3pI0l4HZpon8Eb3aNoYGpU nCrv5lJlPn551iVr/Akofo&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=3/gNYMttZlVY1kipke6Wj4n8dTeFikJ92E319K1 2WE=&c=s7jtFPpTCdhhbNzGOxlAYCLebKL1ITZCnC fsmCKqtiWEEPP3xMdqiqSSOV1azPVu0QiTmqS945Vk8PwApYNDpO w0UYRvoueA/bywBoHjy093HSuADmv1pTDJd4Qekj&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=uCEii2P73RwzY1IgwDOfv1rWNK5HtmJBTHDgMvP FF8=&c=Y8CUJUlbFG7mw3dCP/ DUI6WDdV6UjWKoAQENBs20ex JfdKMXifuUjIdD zAH/xm2u7tTVw/4RcSXeQcnT7vUNozQY43meQroCMpl5woED5J6KXMldoPiaBshhN8yWf&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=B3QCpjJ84c8H3KLcHz7bhbscvveR01vXGTM/XKlg8ps=&c=BYksyjMgQdVe RvZqVftWDR/Yge9w7gCkB8wCj7JH6v36SHS81GNS4MDJOtiR3eMxOvBAPOxYRkrCFPvGZ8v4f1D4jJAn21eEP42W41iLYMTbnP26BJ9f6XKHHach7w5&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=YgG5WADeFaKVabjJe7/FFqQm8s/WgoPvmfhz3gG1xXg=&c=10a4r1ln/n7H1PEBMuSSfIgMiqf90S4/KlHBofV8AjxBLQ5VyM1Xh0tLrRiOVZ7lEnjr8yx3m2yNBE4tHaGth2bh/LAo1zdqbUUlc/TO4hZkP5j PDNgJTppT/8ewQqN&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=0VT8xrEnY6rSKhEHqJyfyX16cY0fTNITgcW4zv3pbhE=&c=DI/VaJm7NYI//bDSRZ09exHLZ0x9as2BSfbDtFKvlX88NdAXIj2fqZDPdiI4ayo dOO/tlZ6XLYSReoeCDwHScfJ3IgX7Nvy6705DwuXBVmjj0CWusDg8XgbSn4tObCY&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=CQXPERta9gUoTs Ft2xXMedTR2sag8tqosGe7TBymhc=&c=tXttfD4Z//W1iLI7z63tiRREapMBCXtNoWf94D41SDwUQ7zXwTU1O85KjDDDL2McefEEJeGd36dWX4kI novHQW9mowCGXICsLGQQQTI5HrmE9uTtcajkvIox mkb3FN&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=DFfUJm wRsM6otn91W0Nltu4uoiQ1KI48/PYO7NOAuA=&c=FcglzXgrLJuQMwsi48JfCFWisUBM9Bjy 58hX79kMpkTSEtcaDHzWS2ufGPrUU2GfguJ7lFj7AVfOelbGDIt/S8mAxGl jK1ouGBxNiNFoa/WeN5JaivSeDcIgMFYt N&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=fHFEme4wjxA6UU6EXkFikaKorxVHmZNQMUiGh9tPVc0=&c=afOo6cczqA/Xp9gb2RLVkyW2OKGZ3 Zy/oy9QW7VrpIaK7QBO QQw uFFm0bKpxW8l0Moz45I9JwQEHs1X9LPGKKiwo9Mbe/avUzrNPL QWNd4jhvn93BGxNfA3IA FS&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=cIPqVYH0ejLxu/aMgHxhmwkWq66PJmmlR0sjARN8n5g=&c=lK6rsv8aq6TNNeTeH8VS126G4yf3xpSr20HFVA7NLdaPVUgjDN4rzr1Pc3eqtpRLl28oD1llkYFSzFXyApUct3kAEVmrk7kte25pT5sEe2wKo7S03qdh2HAUx92XxVD1&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=xa8I uE2efD3vf0JdMM P7HSk4xNZGYeXEapaTJZ2Hw=&c=g15 6vWX gh/vtGQ2XaykiCW3rAxYbJrlPYlHBe9rxkP5VTYs XyXY1UaFX9md8i2gau498h6 MHOViL4e8wmcNKDRPtfYAvQD6XWkVM/O/eMapJiodvNZbHPJ5srZkb&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

Latest 30 of 76 download URLs

Remove bitlordsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.