home

bitlordsetup.exe

Cipesepocu

Mor

The application bitlordsetup.exe, “Cipesepocu Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Mor

Product:
Cipesepocu

Description:
Cipesepocu Setup

Version:
4.5.5.2

MD5:
71a2384264e213c03bf17ad7e24097ad

SHA-1:
ddc5e412d86a03c172bfbae0efe892a7d874002c

SHA-256:
d38e88bd141ba8942afde5d21dfe7bca4d920877c8ecbd516be6bf7c457dac5e

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/17/2024 9:40:16 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.3.31.17

File size:
1 MB (1,088,431 bytes)

Product version:
3.4.3

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\low\content.ie5\{random}\bitlordsetup.exe

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:ciDye3roB5QUF8c0tS/AswWVAMdhVMcMe9BI0J:ciDHb2N0cSiMCHI2

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9046

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file bitlordsetup.exe has been seen being distributed by the following 15 URLs.

http://www.clearsharenew.com/c?x=zDdSbL5QrKPU8iw2B74cpRsMssOOBHWH8UrwB94Kk1k=&c=bsAXxc8WT2fy8wA6AEZfnM oviNyP7GwYSA2VfMyZB6INjmJDbMyl5Sh70kSMTn9Q9YJq45wW8lL6aM0sDD4V7iKyLL9KoJ0x42ohXx QwTub9DHXyg2R9eq0kYNQ1nx&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.cleanchucklemeta.com/c?x=QA9i 1d8ZPzn2g7wM1D9gFjoM9c4hShQ9BUG0nai1VI=&c=Ws7o8ix3t2M5ucxNPZuBFKHJDRC8pZmbgygyCf4lRs8LyN0t 3YgLa7pthdocW6B61dQzInQX1iPNz7To3Pcx0uTgqq 6zaLLOD7qAOW1aZbp iupMgLXlT5umLnoybA&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=BU4Ot5yruGhZCnm fMKk6Dfl/fjt2ISLyYz Nq3cb60=&c=LlDDIFxovP9Z1mmfxyO8IKxec7t5Ss8yzrXSXsVFKdssuzhzNUF6Q2oav7YcEMN2HGeOvUKt9Q3pzPE45YamCxVd8sFA4aDtlXoAOqn9UTMWLb 0mi2KdJhc0zmOvvbb&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.cleanchucklemeta.com/c?x=rJzq/7AukH47u5Q zLzaJwz3nlvm23tOAEJQMQnzYK8=&c=SRaUhxpXzxomWqybGDYaXehUuW7qUOwsrsZupPJZ6DiT8wUbm47xIHpVIhviM3BoGIeY2xHdEevVd9Z/J INh7hygcCHFO6lsJgci4yu2ftn/gsJcilAo8jKnrJyNpeN&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.cleanchucklemeta.com/c?x=LCw8O90tRT8GOmonB88jpGaeJKIJ1/tFgJmOyGbMfJo=&c=V4cHj4AGhFzW O01PUc2rMfo4fj37llp8bmHTs4MRA 0MwXsTFHnkH/hL3Z9NaMD028nYU4YcWAW KXCPwOKKsx5Ri1hk7wiQEQ8 T8dlfl0oVF7g0TOoOrjh5hPMIvJ&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.cleanchucklemeta.com/c?x=ScpMq xPylnUuPfbN6T1gPYwsJ/aqskYzmKFNqvDZ/o=&c=v8cLOtOG qAKbmt0rDD0w5CPy2uDMMwbfLGRN0sxOM/gog3jQ5 rHLJdVia8VyX0m CsQlgRYzriRMYZRxOztb1vnx7yk3TTrWJGF0OiEnb3voU5GAZtpuBJGowN2q4R&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.cleanchucklemeta.com/c?x=eoW8DVXOdMZUIgyYqt4fBPUllGBATaOlBMwKnYK2NUI=&c=n1etv8ToWc7B51aUcarCi18al82m0rW/bm2gBC3HoD87LH0IGv9AezsPUBRjLuE8im62IBfsU61NbxdFodgkb G2Z9PDEU40ztEHYmg1bxqwvplBCOP0HbJet6fXEfni&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=uAWFoJWcxUtmzQsHNnldHJg2VwrKmqPYynhzx17CTyE=&c=FevSOR9mPGgeP9qCL6bUQKVnlqf8vx/iIOJoat9GaElLbL3YcZlVqHvuGxOkkpuNOPM9yDomT5FiUE2cRiHp8SLhuIwfUPVQ45e8tWZg1fadfpqBShl7Gk0RbvFPjSGw&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=wSWwY/z6lwMKCLYQseCUJF5ITo0ryrxrrr5pNv7nRmw=&c=Ca2rdrt9uzqgceU9I6OehqviC9wSXxW8R/oh5zQn82TpCaBpTiSGbqllSHjadQ9kc 0RZ0E4rFmfUm699K8efTVC8wHcNVHYtxH2QplKe40VVAjRCJU2mqlK0HANPBam&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=SxaC/OWeLrEv93oAm4twCp53HGa28RUMMGUAsgOL98M=&c=swuU9wOINsEsnkZTfiJP9mD2fJwWWeoyMX6/q6oHoZnV8k1ivGKIv/H881YUtwerk6RyPezM7EibN2Kq4 SzgtkiYtXFNVZyKUax20qYLJhNstJSR0PqtQrfFahdhwSc&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=RV0nGrNqRtQ5PV8AWPKh1isi/oRlucdFdAHOiS8kQ4w=&c=CSkzOukAkK4hcEmM5Bqt9ZoXUiH kuSbqnNUkpmxOpBYlX3yoGtxAvyaRSW8Wm8v2L/G5HE0OtrDTiVDcFeY WONJcWcvNDQdoy3wriwaRrLrm3YSgNPczHRa1OIDa3A&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.cleanchucklemeta.com/c?x=jgNVf 4gFHoxTJLMnRoW60t3NCUvPnqWJb/4pzTSdtY=&c=Gmi6XzP5FpSbf94ypOut alWv5UcBq6FBql/L9SyWuHFcjoqrP9HyIICp2P7jKLaoj ME6oi18QDJpl6EVeRNF ZS5K27T2L1lwlk3ziRi/MZFcn2HRtyvTUSNraulGk&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=n9IYf7ZX06k0ccDotcLDx6QIqes333/Jqpp4aKqENLI=&c=QsXcRMVlfbHCmfs0ssckf9T4Rg2zo5FkQoWL5c4Q/3qDUqhd5j22tw5HFgpqPKiQMOHP4oJAIYGUrwHc4aTbB riBzRQ9HWaLsmRTSPs4JTerOo 9BRVtTN6MGJh5eF/&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=UCJr6KA 5ICzzz 8hLFTEvhCHSfB/5qRxFvIcttL4Z4=&c=3DZ8iA6q0YTXNXeaDfUA1RXk8VCdj1JpkiyeldIoHexUyZqVoX4CU8CUIGlsB6O7/1RdEXLzMVnWuo6//3A7hjx/mn g0rhhnM5Zay1cgthVW1 t9x Mes3QTWwA5SU1&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

http://www.centerfilescentral.com/c?x=IxYCRQPPNSexIjO2psuW60uZR56wirirDqo8/V58G3I=&c= 6lHCbqR292Ai859 6ZNBONAESCijPrAr6reooHRhWZ0hcioNUfcddVmdTm0BQZgptv8gElXXBKyfPu2nSlwniw4n63Y8JzOqMxOU/DRqRpx1ea6asGujih/Qtxdn5dW&downloadAs=BitlordSetup.exe&fallback_url=http://www.bitlord.com/.../BitLordSetup.exe

Remove bitlordsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.