home

bitzipper2015setup.exe

Deko

MaxSpeedy (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application bitzipper2015setup.exe, “Deko Setup ” by MaxSpeedy (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Carero   (signed by MaxSpeedy (Fried Cookie Ltd.))

Product:
Deko

Description:
Deko Setup

MD5:
f1916be3523042763838636b09d27704

SHA-1:
75a236e8b5e1722eac4cf4b3f6b03f7e48f43a8e

SHA-256:
c6fba121f1568bb9197e80b6d7aef17fd0a0ed70fb4776c1215e07ba0fd1f481

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/15/2024 3:20:18 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.3.14.14

File size:
1 MB (1,081,072 bytes)

Product version:
2.1

Copyright:
Internet Software

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\bitzipper2015setup.exe

Digital Signature
Signed by:
MaxSpeedy (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 8:11:09 PM

Valid to:
6/8/2016 10:06:58 PM

Subject:
CN=MaxSpeedy (Fried Cookie Ltd.), O=MaxSpeedy (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112125C58A41E827F13C76AD2A1D648B8808

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Xpurc/q1bLyox6DNLufhpqdMsmMdRemoCD63B4BwBolNrmSR1+v:XcQ/q1agqkdcdRExu5Ny4y

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file bitzipper2015setup.exe has been seen being distributed by the following 37 URLs.

http://www.conecptbundlescity.com/c?x=lJlVlRKa7VNXthhyE0E2HEBw2CdQR49 RCEVZ0wymsE=&c=0 oxDB0T4j4vYhtqzFNLcUioMclc3Ypcs3gmUFm6iu4nWj4LpusnN5CcVT7C9daN0d3EhFuYkgB16q1L3FzSw34GfCUPFQJ9WevijRC2rtCndOVVnfvRi/oEwGoB9Lyp&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.farmapplicationbits.com/c?x=T0DdsqJSh7YcsKE0oFKjavGqa/Od8ftSCrgJNkwRH6I=&c=uiGtddw8Pd4SVkqLAvALLBo97iReiGwufsVrLgKMmECu7DbLZ3IxKNC922greBu 1rBz AmVjg5DqFCPazIO12hlVx9qkgeRuQVi1dJUGa0LQcFoQuVYYamyia aT Fy&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.conceptsbitsvaults.com/c?x=dXlj5mIjpyUFVKds/5P9VuIL1pVBMfGlyQaaj4HUmYQ=&c=3J4gdWtGE5ZvT1qTDIGt0mHDvg2jYZP69Gm7z8nUy3BBsOLcJYDZPwVKoO/3je8wpt1dvFMpGtKZnQtoDs0JkQ1wCKHJxdmpMu5jxL8afqNi0gCjS82GOEiz2NJJlT8K&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.bulkfactoryranch.com/c?x=Ubpwmgolyol eB6q2DVHpT8qTvfdr5NjB0QGJFfblYc=&c=WxP8Kpoi8XqtJRwdnhyC5Yz1vluVekwoV 9r6Nv1O4hNBWnimR nu2pPZGRCyp792Cy5UVoWhMv9GO1NVv0fPYopP7LjqtM0tIQC0gR6INLN E5W9DvvQ3VnhuH1rMyW&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.farmapplicationbits.com/c?x=UwulfyBDQXLEdDzgkxtDqPLaMgaYGbf KjHM04wN/gM=&c=YN7E9vwlpvfUFOW4jc62U84nG930ZTt JgJZqgXenp89vJ PsiyAYLiCrTA6b qf MSe8aabOeWAfYA0vBoIDoi6BKFsWUDTDrMYhIWX7v4z1/CaMubGPwd6pYE5irw9&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.cleanbyteconecpt.com/c?x=Z6Qg8LRNhyXYFLjL39gDGSywG4yQl/6GNQwwIf3bAXg=&c=fpAr252TOU 5A1QrvqVxLGzmR7mnmyYI0EzH0IL4Ni nx/S7jEGmvEMXy1Iuj9Jei/6jhIVUc4XTbjPFlML5L7nTUe1GBb3XKUt6m5wsf1kE1nvZ0aupr2kW 0d12ONz&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.farmapplicationbits.com/c?x=1pdEFMt4M9pLTH7XGGf7riUv QszZFKht9 gCziW aI=&c=bTCQEtnS2/z7ypo4O/q7M emOKtlN0a/ UL2vR4vxSkLj6BUmwDzdG/XRWUJ6yhsoqYd2uwiH8GJSN8rhYG CP7CWYgF7Aw8Lx3SD7dyVq9RHW2Gv92GZqi 5e83Qozn&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.binariesfarmsend.com/c?x=djP8FN8p0HZNJoARpOwVK5mYECWQ4udOJgeHqYUtIG8=&c= dXw1m0JFPvY8QLqn acAIrfcR3mRJxtEsXg 0be/MHiR3W0cajclK/CXYzztpkt L96V13v1UB3QAu2 yaOEmlYLf6r5s3HWAMEwTMtbGeEpXfGJ7UKLi/ocg/ax0I6&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.bulkfactoryranch.com/c?x=S6Kr6tdUqcIwFw TwsIYysbnODugYDGMR6nzxMtrpBc=&c=YK 9FvfFgiyrNfH9fWThPK98ih6mDBN9QZ0HfU8RkaxWMC2YsxhfjxjSijsMRv5DI9eVEFnP4ER tOR9QdWwsVFaun1YKxVBqozy7uH227mwG8fDkBV09Atuu0SLFa6w&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.applicationsharestock.com/c?x=jjwCEM8DcMzwTqxDUGHm1irnZUJyJFtjQ2Mcu5tWuQ4=&c=3 ZCokaQjS9VI t74UkF989ZpISmnZtiikMjSnzf13J7altqM/dYRsX145D/EUzQHKhHvxzoFRkb2Ruu9KccyB7CnGPeTl9RUIQyHRUs/JXJKSVJUYgcsrIJbxcm81Nz&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.applicationsharestock.com/c?x=w51 VIScwMsdlcqeViLCYELTGNNwCIlcQ5pK0143eJc=&c=LZggydUxSjXz/jes9yXRobCeMeL5TT 196QJHl4J2j8HCkmJOsHAMFX6xF37p18mLk p1a hYOkelcyE2LAUANqzhiF JGBUwU0dI9C15RE hUeI1XkHy5UDMDdyRvBj&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.conceptsbitsvaults.com/c?x=8tVH7jRnQLz uAHLcS1N2mOAJSH6/IW08UQPv585xeU=&c=acnycwrLv5QFlugszjjFe30HUTZz4xbhBksDNwAxXk3w5CZkMzCsfzIsgLgFqiv K2IJi6C2dFk3TqA6Ru2R/h6iAsMZUwWV8hjQ43z9K5w5S 8a4 lpBFXZFYl3462I&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.conceptsbitsvaults.com/c?x=Tbi3y/Lg3FU fgJS86gqd66CpXPa3GO9qR1sdWSgs A=&c=7II2BpunwwDi4IdMBfyGiips8vQ4pr5wXVbd3g0bbI0ChDICh0l4sAYFTm3zxdQ8Izg6QYpxdXcoMmtLkCLZ5dTZDq5nUZ2P4vyzmmD8HP9oReNt8j1yq2lOfU4ElzL5&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.applicationsharestock.com/c?x=YJ/zICA8Q/EN RZ6vfCofso6GfzOP/bpVIslYXRUkUw=&c=KVr4fgNixu8YUEljod00Zw1pcK2jGCeCQ AEXZnV2G5Mde2hTH7Wx5dKdSY19LxYkP1bn N0EmMw2JsqqA/ZTGCbs8qz6Hx/9SOkDXUEpl15SBcxm8XcFXTT s26Skjg&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.binariesfarmsend.com/c?x=sl5L0my6v hBvvT5Xr/ysvMy4gPpxcVVtv3DpvrQ7rY=&c=hVgkjY9M0w1A7g q5DUr4er3ARl/k9OEOUPIRe3gU2p0v3XeobPRgWg6v/UlcJ9VZzdxuwoY1TMTo6XLDEy zqGCpMR4B3bDOGDwRg3pa9jtXAc6Uj0BS07rHVdG6MF2&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.binariesfarmsend.com/c?x=AfyAT kek6ixK0NVqlPbynqypcuRfmILoK7mLCb3EPA=&c=AXh Yt8ft51d4GKrswHwHLf5fwafujjLpyWGncEMeAPVRq/Q5Bm9Vmfm2gXTXUXM5U1XcvbMl0WW37xN2rF5moe8eKZ3nMcxGCbjlMwbH NNiOqW9LPYTCObgG30VBRr&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.giftbinariestowers.com/c?x=3qcele9slmhb7BPbqFUZuIBhM/bSv5caMilRIgkCi3Q=&c=/IZNMFylj2XL fccg/xvRHnJP3/UMPQyWOBUVlna6v799VdpqwGt4hgZ4cUKfxrLIfqOZNJYP9F17qBAeQJBtEqtH2XsbamdylBAipUXz0mmoulbL6RrJjg1uOZfx0YR&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.binariesfarmsend.com/c?x=JIZZH bwLfVcc3tIQEWirJQ136ckIuei8DStSTkf9R8=&c=MbJARF0UevDGbJW5P0jTW9bXI/lFcYOzRc7cwGyJklXzDbXB0mgudqNyAgYoZNFqIzRxiaXmzUvHlAygb2mAy4lSFAPitHncHrCDSDWoH4wnwgfeQMa0h9aU1YYlECkg&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.stockcentralsign.com/c?x=mgJYYExOb/fbo2NRymL6liAMo1Xmgt7N5SUEn9LgxyU=&c= Ad0zJ6EdJ9cTqhsoS4v2Z9BfFPP4vzSaqGIAm6fdpWf3ln8Q9i0H3H gMyzuW9SMRHRANBdVbmO45fWdTOsRQ43yN9EJb4C3EJ2jAB WKiwR6innRM4D7zpcgxP7VSI&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.bodysignsheart.com/c?x=4g3GUketH/VKuup8MJIApc7I4mSuW1TqNYMnaXFqaa0=&c=NG0znNn5e9o4kXwK29YE829sGsoDhrhGzy67CAXh9EEaYTY5WVg2yLrUzmwk3IjDdSkDupQlqjbZOo4xBpb2KagLBNYC0DDXKXYJ6A6HDKhjRJ/I5KItLQB7b/aEIIjz&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.towersoftwarebundle.com/c?x=E42XSUvuzr4SN58Fk/Xd2D2ps7HeYwMJC9mUFVURiFU=&c=UUfNKXZRBYFYYFnXdHstzV4TUQBpEUr6fNFFWKuPtMKnuPMk3tY7g5sFOKyIA7F8cK5 le1yHVzkOoyw50HFgEmjfZ9LG4W4S3pLN2FTVmp NHPyLa6AZ0urMnI/Kc5L&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.farmranchcentral.com/c?x=541n8IktJqaELGbUjYhBohYPNbldVpmGCv30hxZLJWs=&c=MDCL/ah0Dr/OHM9gEuqFfk/uZi24DqHlcWR7u8YJ8mQOSuKJIKTTKOrO39dbLxsPmJUBFabK2Eq/4FqhZBjCxs6jR9DpbyZzrGWwYS3bTynfaxTruo8pgWEl92mCItFj&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.stockcentralsign.com/c?x=x2kbulHgYR7wRrO1OODjnQFjlwTQjisVAfXBPWtQzX4=&c=Tk7BletLNhC2pZBWeD1TUwfCji1icT81uJ5RpgQ msRgxIcAMqucwfu CZw1DFBmNjCPdr7EWKIUF5pGDI9NbbSGbBHThaYAAG3CvZkE7Nw17b6URAxpUKfKda1gI41I&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.presentfilestag.com/c?x=TEetzzVP4g6knCvFV9nL Ws6/Sno7LYvZWiNplPalA0=&c=1oM1VhOYtja0pM6RwWXB3kNcqulpykFtcl6SHEJ1NOF NXrAjrC3s22HEHbpNK5Wj2ykkgxPCu8UX1ToZvlv6xTtxj99X78B7PPSyuP3OmttJBTFuAZHl0eD752rSXY4&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.stockcentralsign.com/c?x=gT865QtfJkQMuLg HfuI17eCuwopisdPu6W2qoaDCI4=&c=RLD8JYK9lksZDqqM7HG5IyeNh/lnIR9dkaRV3JpUDV2YGSPHkM xqyG gvRuWhbkNKRckY dGJkqoefzIbb/bEq79EMuAepX7t l29dvI5JZWjSsiUvTGt SFVJqmwQz&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.conceptsvaultsfiles.com/c?x=5wHWSqQVf/lB98ZG2xc7ksNiNANUNjzkbKM82QTey6I=&c=LwwZLjlR403EOnDxyAa HR76SwFYv2OQdOEgw1 /39gOLDc085APhS5fGVskjFLa/HqQFauU4e00/3AfpVfgBMjFsktBQFak4AYea lHcSLBo1hFdww4IAo9PfnO05Mj&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.farmranchcentral.com/c?x=r8yhMGeV8JskgpZOaDvOacawvbNhMRmzNUByAb6J5Bw=&c=C6moY1rhFQilQaozZgqoRtn3 935AmMVUMTO9qkQXfxgkNboMXUKIIV05klSZEGCmZ7CtZsQeKXxAAM43rm4VFRbB903VAIWzotRP tY8588/FtcvJaEry SMF/cWK Q&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.bodysignsheart.com/c?x=wHquz4b33Hv0iljXc0KWHzYhVTWFFRZYF133hwqcvDM=&c=N4VfMXs8QijsgWlftDskYbGVf2vF1teDpb9HY5y6QiVtFnhl97fDtNLEviwjmakwi064Z8IAOGpwxJFX7sH3fGudcsl78J3l3SCgm/ vmPeSRQpxCHy3/WenWaccidSt&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.vaultappsranch.com/c?x=69UsIrBZFBBJME3SO9Fqfx/GWDqXKHghXYDMykJZ4ng=&c=g3QUFh4OII2G943tgdznTti4jO/mjykViN7V4ZYjtANrFhy smTlyKNbQ99KK1HNksMQ6 KrTaScIzcWRojh053aUU9JD0gknLitObfYvuYWhmh4V/iiE4I9FBm69Ad7&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.stockcentralsign.com/c?x=9P5LlM1YjVxDXDQAofJtlmox0k18cMzJlCXh3sb3Z1Q=&c=7evPjLb53EP8KoJc pMeNatV zeyqW0KRKvQ1CSFRIfbq8ML5ZfieC9VLwAt/MBFIEIXFwKboITe8oZDiv0f6GwXPpLmlmUiUJuyKH SLqhu5sHMHsMR9tAJ9ku sL2u&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

Latest 30 of 37 download URLs

Remove bitzipper2015setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.