home

bitzipper2015setup.exe

Gamog

Parukumor

The application bitzipper2015setup.exe, “Gamog Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Parukumor

Product:
Gamog

Description:
Gamog Setup

MD5:
c98cb82b25c46f99a653084560b3f1eb

SHA-1:
e014e2fe825bcb3c53c3190b43892d863dd9f779

SHA-256:
e94ea4aa6c7fe80be7ad035fde81557b4dbe20e94989d07332801aeff898f46e

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
12/27/2024 11:50:56 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.5.11.8

File size:
1019.2 KB (1,043,666 bytes)

Product version:
3.8

Copyright:
Application Installer

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\bitzipper2015setup.exe

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:hFvmfMQFGr2uLpduKYfFSljlfEiiXyGEP2ckOdwyf5qnh4a:zoGr2uLnOefEpyGLqdwyf53a

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9205

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file bitzipper2015setup.exe has been seen being distributed by the following 21 URLs.

http://www.bundlecentralsign.com/c?x=cvPOSxGC1z4/txmSf71jpQsOQwn95JfyvPLXTK4SR3M=&c=dFUOqySO0 DEexOFYSAfHp2mO7ajAZwCvU/HNetMYw6oBCzE9V5gyEPuFkBFBMa51r TQRt6gbDRbxzBsT/YyJSdt2Gp8MUtlgi6UG6tucpIku9ZcnNr2o0MJ5EdrIfJvgegLTl77dCv9ymbROBfTkr51OoxdXD8a4rBHZ2ZE5jpUH0CIrfjNGS3rBEG7xZP&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.flashhostingapp.com/c?x=Cp1WALHhBWfTFq41cL2JJo8H0NvnALxX4VokhAHa6og=&c=G4ylHT8 n/Cvj42CILDf3xS/Q9OT2L4IU2GhMWcgipwbyd49leMnpwMU6Qpsf7CC92NF3zAQE7kE0HdDjucNhrUHi5fOky0YVCJjcNQAqFNSrAxEeFgxqFcxUkZpjlG1uCWCT3hJgYEEvqwxqjt9V4RtWBvRglkHeVoHBD4QF3nc2SPGqbvTGrylFMbB6Foh&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.conceptsguardbinaries.com/c?x=58qXc5WvaWOBEQYbTFQwvBja8Q89lNB3np99gOH/kkQ=&c=k6doulAiKaogRZfq91E/jt 69ezzbmO2IYD3w8CiEey9u9YuupcnaqHHL1mvhibR/LcoTjgU3RPT5zetQA2RJmdCTfVHr40md4i0uYNMVC7lihob325ASxFt2O3izRBfNobZk318Dn2AQfETJo9dgp/QqgXlrOGyFntwiqGjBtH1YLKuHdSWDuUwGCtuN3PU&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.bundlesheadsign.com/c?x=PAmo5Vj/Udyzirnmxub3mSmeUgOlmIH0t8A2R/U0ybw=&c=yZJwAG/m dRvCr2gcp8fUsQmWnyRRglYBH3MuqJZ3niu09SOk59qh/g/LKcQV4u3XXeFcyxwj94n79 sGK CLzRN5ajvmJcHAI9yYFN95D9x8WRUeINv3lQRT6v8nAhrt2BNFqJa pgTrbfR2GaNJxUdYZDnjvAcolBwGnRLRssGaW8o70hw5pGCGjSFV79w&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.bundlesheadsign.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

http://www.presentheadbody.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

http://www.bundlecentralsign.com/c?x=9jL OZMYINU JvcNMBNCAr2lONYFSoiEcz9jLwjOsyo=&c=OFM4/hAxH3x5oTwyLBURuOnjBbRR1XxC2ThAA3chzqnvO2lu8/E2sdVT90TAeA Q KzNC1yHfCCsDJHXAgdHskNhVWC4b1Ix8kp1/ZpNltyRS54QSZRFIOWpqNv/XKkuU6O7fTo9zsj hJXaQQfbLK J1IUi91m/ Ta/6wSSUuVy/bHpWN8jx5vrCkAx2aMI&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.conceptsguardbinaries.com/c?x=vS1ZAR E/xTqQ9 1a8emPXERQMeaV5pwUTlR1feHoUk=&c=dYmUUT2aUI5vq8lqgI/iK/OwP9J5JJ DGfgZh0k8logPkUSy9 i7aZUZtLNajnvmBcKLeVHI6YUSQag3n4Lydy0HpWLGXe1izBuNAy/6TGMXdJjNAfEgbEoQcWBYWqeKtvuJJjWljyq0hfpZjnMiRRkJyr0kAv52dxCD3G4SoXjjz4/BfO6sZCrQ3lrAoU/C&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.bundlecentralsign.com/c?x=PsW4CHXsudPsQB8OIHpOtWRoedSGFOPXfmnn6JYkVMY=&c=tgkipmC3g09bHXkm4uxarjOZQt/OD1GtrGISVRRXxDKkBvCt9oJALk5Xa4uxx4Pmk63lZr2k2lWDMvIeXykvvYaFxh DQuWTCn4L5w1mRF7O9 mxe2N6YMIzX/MLhjTcIF4VzSNLIXsSjpZWY9F4XECissqXO5RZDZ qcnHz4JTMe8f2CFIjFmHJUeAKUooM&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.presentheadbody.com/c?x= xc vg6dx/ qI4O/7 leB ANXFflQlfMu2d78KsHRc=&c=FZXuomg61r8XPGIyQV3TbuaXgo68AsaEquaLINgxfvSDArBk6eRl9CNPusmbbgBMr07AFSATxcAXaFjHppEG B1Fkqoef3nwRx6C1mHtWgsQODWKyG9QKDPeERpOalaFVqzy4nGw6imxyeZa hRd7H5TXmxviwvcWdoUj53V5IbMAhUmnO7Fyatuza6jh3UE&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.conceptsguardbinaries.com/c?x=VexYqaJp8lQhe55PythjX7qQYbmE4C/nUQjVu0tQovk=&c=mDDVfdraYOc emTc4M08s6WBJhJKSR4IKRewauevXdZ5jsZHLyf5bLEcgry4/PNMPuFSJV7qWZ gybtYh67 pa5QFdGlQYAiPVJRE9jYzBXqZKPIRvRene/0cNho8dWL7sOpMb AkCAf/NiQfIOC3fiozzKXBj69LLXPLALUFpqBUcdhU0jr3VDJYW4MWQn6&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.presentheadbody.com/c?x=hpjnyL3IVykneWOjhDCZWQQoD sMd5LhbX/89sGx7us=&c=BNYEQ9CQ/JwBSBoUHTw4hEb42XbEEyxbIwWjWxePiNTw1HL4k09 UmNPXm0Gr8suvQiIY2jC936oGk b5/9ioE1lzOJzbm1trzPDDoj19v0xbW7U6rB6VB3 2aoeX R3qhFaEi6tTGLHpCitlUHiJSnQvY3ZiA7tz5u4p0krSorFy2C8e1JXi0Hr1lxa8 1H&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.bundlecentralsign.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

http://www.flashhostingapp.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

http://www.bundlecentralsign.com/c?x=7vNlbQ0qCT4GcXp6p1FaGA7/or/sgItmkAD1vabEfHo=&c=iARn8/0iPFCwMVQZ3gb2uzXna5DePaER2HfykqQi3pkdNE3RUCs5Y9bTMpZ6dQzMaJYtCJPd8AGEknDhX2DayQgIzCbU5ko0rBlcrYPo7480W5n4AGFcDPRZq63lv8eYNnSLfySw gUvf8bOTrU1xWJELdXv1fHzPycv6BJux5kvm3/aFLbDh ZB0wqjDB0P&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.townhostbyte.com/c?x=of3sVW86/MP9O01B/TuI4R9/mC1t0K4 OcgFovX6 1Y=&c=gaQz5SrJlN p0JPOGZl3o1RDZenwzUmCKT6QInWE8bIKd1dWq4m3JCPuSxBN/50UI38TIq0Q2N7JhyZVhQprAJkZ0q1VYqTjGKTd i9QfSl31s tPzF95Fx8RgNqkO4X4a65gzLDv2cNQpz4N0qPqLYva1zVgcshV58YD4fAVpnLz F kWJzsIyQLYRrRudH&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.townhostbyte.com/c?x=NWQOZCnhQ/84id3NmCkJ4j zNTozk4TO4aFB4Y0u8ow=&c=Z7TAtaErwvd8uOqwnF2Oj8XEF4BPeWNnQoE6dHgymSbomcbF8o0U9AhfHY628bsIJch3HkSSho 40ilwIR2P7TI6WEnV/zHCgf3p6pg75jdIqVIjIszi63aZJEBSsFXUglddk6SRcA/K4thqTV1CXdTetKJXBB64dCx8EpV8fm4SrnbHFROAlZ/C512goG67&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.flashhostingapp.com/c?x=peWrKUS4pQ/4Ym9JOMkuIQUyXg16HKwNjzN4wGqEGeE=&c=QXNDKIfErTSfVoDdutE0n46izTcVF2JiBzhZ6AdvtiBNkdLXrtir2khyon6bz7pMksYoXwXpdlYSAmrd8eeKLxNmOKraDPnF6rM/wERZX9ivx6Ck2VQeTovXMFAT3FfnHVvA CZejvQKjm qG7lDsR48NVpuRiVhGUKC3bCAw5mZ7xYqtIM52L1P4Mpp776z&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.bundlesheadsign.com/c?x=OhPZF0rWBuIJUFKnAjROjbOl3x3Lje 4iPBy8kDPk9Y=&c=SmmDT 53 KIpG9OytrJN6YXrIjsFsCjRYyHAftgkd2utvmbl9V7bQau6Sa Mr4t9N9o7WktilDUoAWJuHLRG4v/x4cGX/H5w4Cc4kfBQFWhRIAg/70N6gIKafXKnYvqnmnCU1J LHjFFEsAPDsFLs1k3073YWq905ONBNNoCLnJqyyTh1IItdY5/htlO412J&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.bundlecentralsign.com/c?x=uCpSY s2NJuJEgTrrApb35tu8wEBQVC TUe/NHOelrQ=&c=kG 6 vdbGWVQj6CWVReuUSSOSntbgki8kLRL2dnI4Ju/02 wm3L/AahEmerHGrGioz3ts28E53PO/SkVFp4OXRdUszvNzATdxXO9DcTt44er8OnUqSKfP0cG/Fp/HS3Rd98elAT6YIXVQFmBH0vWVLm0UJZ2DcAkNJ/VfPoSUVluaRj3/2k2BKxWI6a bzfI&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.flashhostingapp.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

Remove bitzipper2015setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.