home

bitzipper2015setup.exe

Baromaroro

The application bitzipper2015setup.exe, “Baromaroro Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Product:
Baromaroro

Description:
Baromaroro Setup

MD5:
e46c2114736c3dcf9203f8a7fdc71ad0

SHA-1:
e8bdc414058d7f973886d2d0341fa8a057cd77fc

SHA-256:
6366aba89cd2c997b729ff295ccab5971c0a77156fbdcdb4b2ea58ac123db82e

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/15/2024 7:31:05 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.5.17.9

File size:
1 MB (1,052,999 bytes)

Product version:
2.5.8

Copyright:
Fast Wizard Software

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\bitzipper2015setup.exe

File PE Metadata
Compilation timestamp:
6/20/1992 2:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:DHsXdMZjAomR9Ev5OusSFoaa9x1rk8+rzEv++0uacyC:DMtMZjAlHEvOSFodNrP+rZ+gG

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9187

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file bitzipper2015setup.exe has been seen being distributed by the following 15 URLs.

http://www.townflashranch.com/c?x=yNj0fahOBnIaM1TV/aMMmV8NyLoJ CpX/AItSHv/ikw=&c=5 tCwcoOqM2z6MtVCIlevyA2Tuhg5ZaD2/ lazSp2yML58lQZF9yfhqrzQOWHiy5QZ4o04jKFrxGOsKlVUlF d/rIFnTezvguDE4kzIp/zdUr7Q6ftFsPaHi3kFRXpvJ&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.flashtourbest.com/c?x=HkpwRbVNxm5YTHovyJ5umGiyNz1bBuTcxTnR7UpIvko=&c=u5IV AWZNgOOGetEPTxligmZuzjvsA8PJw9c7Fo0umhDRavUyjJGx4TbPr9sJ4cq qIonajQELgGHWguqriS5u8BLFjUWY8lVci01d/hevWUcIfZVZaqRP0kyfcdS5tW&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.ranchtourhosting.com/c?x=EvjPpfiql4IorxAdzCYpd2KU5JPkkcUAS9oMrDdj0oU=&c=hTGkTCROZbxk6pMxmh09Wetv/f0RiLDHg9hHCFrUGk17QDKeQ7Dw7MCzOz4fOwj3rRu1C/E8mTjW3iLvxyjsO/REiKeetgrMGu4Xjxflk3Z gIjS7bvaQB1SCtlUJnnp&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.hostgiftuniverse.com/c?x=NDnHwM7k31RVTwWEGol1sTmO6qP6e2LV0ycZ2A T2Mk=&c=p8Q3bjE 4xPvaqKj2qPy CyRldWko0m71Vm vHpirNVKciklbjOThLwKnDYdzV4ZeIs6VmJ2uBIMeSTOc454hckvXBY5RkTkCPiNdA yhHE7IX6jOfOYu3WbCRiUwxAc&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.worldbundlegift.com/c?x=hA3DFTTCTkmfAgHRtTP0J177oWb71we42lyyLzqER7I=&c=i8AYnYZNuZWFEdXc3gn63d3IiDF4voXFmTENZCFl4GQXRmRKU1DHDWGPkvymUAzNGa/Wpz3CiTOy1/6q5muuzMay9Gv XYEOIa AZjRGtX/ziZtaHOaNJULxHk/wji/x&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.chucklebodybits.com/c?x=GO6a3bmfNIoolOi0XV8rLQM5WlVCLU5K0oBwtMhZLe0=&c=WcooK25N8lltrjmZ9pDpgxZeHFXRj0rhOhBxiInfv4Q2Eu2zEy7uSYfDdpoGw7WWoxoIjslyuJwBaWY 964QUa8Myx6okBsyllxISAuf79pN2wCgp/3ZAMStlE3BkL7X&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.flashtourslaboratory.com/c?x=CJKl244spFf7BJHyDt87XLybwVb7eW vOBVepnAfaX8=&c=W8tdJmwUEgJJPX Y4DKIUeUqdfY0EnOuhlmvm3 pYzXiExZmd4RPqwkg8l49qW8TVzBK4CVub vnN0H87vdqrWV9ObAVwFi0RrIEvbWgMhFZ6pnfZC/exSXG9GbPyGy4&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.capitalapplicationclear.com/c?x=eRUBV8VHg GkiAzcG7mfieVWN8/EATdxlNuyIwCcXm4=&c=oIwhGL8bf1mbKbZGoSfetD2NxX793kjh8mvNbsO5PmV/LdyYf7 qQ3t81dO3w3eaOEYsPP1yNHlQcY6ODxlR91ccNL E9awyu8zL7lF2OKyv8D thlbFJNW8TpicOqvB&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.bitspackagelaboratory.com/c?x=Qmk70T/rom4nF B4R9DJfOqAu5XL0xa3VeUu4jVD/XA=&c=LRQ/03NQC9 VmBsSDMvvcYkJ0QquAN18PHRK55c60yPAqXUDVLvG0hZcmooedmLvEkY8aPdYx6j7R3MKo3fGnEoYlhVtZ7jS5cs n/F9e9LlEOsXO9H7yZxi VlbVBwV&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.bestsharehead.com/c?x=xuyTdPpI89qBK8K5JkDIidll7pWys3AofSxTK0x0zOA=&c=vl5SyEXAFxtlE7/xYXPGBDuggGEsjPXavM0Ud/dk1xYjqtju2EAwz51BJl0PqV05UR5AcrvqkzK1fmmApquR/M2h0cuf vhFMWSyMvpWwk50Yz6emVaYLHMQWAb3uJLK&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.flashtourslaboratory.com/c?x=vU8ztGxMl6ejJPuXNhKKSlPioIdxQbhxFLJ8Hjsnn1g=&c=msAli/8dV/cgZvOTKTxiaYiqJrTrhTaRC8OPFTrFSdDMpLk8iVWhvAtskBq mN3Z1vHPDRGST259abc Gn4n5/a5OUJ56uvtlbsBOyesygX lluHLChVkXeIj6 iss0c&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.bestsharehead.com/c?x=XYcluAVI3Qf0fHGoD7k /IbpPsgCZIB7ojhAHxcp lg=&c=AuNGPtlpzYDKTVv/uGxTWBhrtga7T4jIoWeQG0Nq6uymVBLcMNlXpoTM1UdA1c2Xtkh/4jE K47AyuaRCm9mxRk/A1b0YCT0l0A64o8GTowazp6VuJvbrKSo5zqJ7iiR&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.bodyworldmeta.com/c?x=emrNUNuS6mMxksBrknb7bqNP2VaGI/im9Lg IYV6DYU=&c=smo9kB3oskSFIplF1N1QVmganDWzcHaj2lwsuWwKZYA6P5ZSyEyOWbYX7gjfsyNV92Eo153rv0sL4nh7iUINMhRzHt6R4UKmuO8GQOI7rtEPUsf6z 6rAY8Z3F0/ukiZ&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.dlpresenttours.com/c?x=q oMjyV8WRXMdhGMUzzEpMtGxieYR8WEcjcaaUCR6cs=&c=4f6MRPHijTiMoVW1X7HFjiGZPzWeQLQSvJtbjphdQ23Csmcu4girSQhSHVcKcZonOECE/CpOJkCSBR3/W8motcFQQ4C2 vrua7d/susPQaBbKlfddv7uJ77gRx5AhUBc&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.bodytowersquick.com/c?x=V8UxcTz2ciwXCmX/xuLcOi4v6586tcE919 apvawgJk=&c=Fg3Su/vq0LyykmoQpGrWcL8I/5dcUybvMI5nUAj8K7zhxG6lA75wntVWu2RQ6g6oY l7GjE1Rr5Hlzuf29HJ1udsd4N6IZFT 3gtFiQ7OKacyyY/Mn5s4Duv6kVE4/h6&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

Remove bitzipper2015setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.