home

bitzipper2015setup.exe

Sokulecas

Quality Funnel (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application bitzipper2015setup.exe, “Sokulecas Setup ” by Quality Funnel (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Quality Funnel (Fried Cookie Ltd.)  (signed and verified)

Product:
Sokulecas

Description:
Sokulecas Setup

MD5:
150052c2f66dbc6754c6c4c8fc82a12b

SHA-1:
f30204fa90ca3911dd4c7eb06d43aca9a5432366

SHA-256:
f4048cfd513b9f2aef492885f7a1ab23cf3919cc16241f7f6ce0ec689a05848a

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
11/15/2024 10:41:51 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.4.5.7

File size:
1 MB (1,097,824 bytes)

Product version:
2.1

Copyright:
Application

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\low\content.ie5\{random}\bitzipper2015setup.exe

Digital Signature
Signed by:
Quality Funnel (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 6:54:27 AM

Valid to:
6/22/2016 11:12:52 AM

Subject:
CN=Quality Funnel (Fried Cookie Ltd.), O=Quality Funnel (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121771FCA92BA51266AB4B001FE1E840DDC

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:9ivXERu5CdeJoMKjsEjbDsQhzd3v4xnemq6w5tC5Efxu:92gu8d/MKQNSpUer3Zu

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9058

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file bitzipper2015setup.exe has been seen being distributed by the following 24 URLs.

http://www.universeranchupdate.com/c?x=Xw/jvMH8mJTOt4iLiu gNzDGAo4AC5rqvVol4Lfpbss=&c=FIKzt OdnRHLLw3KzfSmDt2dOhUTGUZsFl6jvqmNKSkuo7Wd7/WNF6q 3ssd6GSUokDmOK4gGy6 X7xdtfOxd5HziAtD/jbx1cMzbW1LHbwx0wuso6ujQ9RsUYz2COUV&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.hostinguniverselaboratory.com/c?x=wgCp/iHsllHf5YCE0o0xZWk74ACqbtU7ri21dVbK2x0=&c=xlaGV0O0IHOL7fmYHb7ejrvBrQuNp3co8jG34P7 JcSqPJ/h1VG6w836d3b18pAlrDQZXgWgJ8eC9KIEBsKorkxJOUGJQC0VzcXCuLk19o5ttOimEgUxIY7rGwTav 7o&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.contentpresentbits.com/c?x= f0e834mLAcXOaNrNNjLIChmXMxm5/AmlvY35bQJmPE=&c=6UCZXN51bIA5HpB6oao qEe4BQqDPxGL0UHy71BBikPJF8ShyCN11T4R1mL126KalwRXVv1dW88kjZCn1OKIEgUoud5EV/C4pw1YJTSfiw5Uj043KCzyvhJzk1VnZnbJ&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.metatagbits.com/c?x=E0Gmoma7o/SZWXyCbvEw/sdpAfn8pQdqxLt/LkKRMmU=&c=oJuTWbiAOvJWfPkmGLlVpsPsbtJzXH9rc/NjmnVe0RKGdn8aLgAhI4GeZCsNxa9mAH FwR2tDEWLt/KeTfaOWAZE xlGNc /jUDJQwyMTAWCQlS0/G5FSNpivUmO9CHK&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.worldappsfiles.com/c?x=WsFpX7q6Lo8jriEuGsiqs015P8wxm12jW84pD6s/gc8=&c=xyzUIanRVy6UQBL7w7YI2LaUJoDd6dKDO5N8MH8LgadUzbiyx62z RUaLJKPVKtQtrkM2kuMMtRlyBUj0CaO2 mzdML3ULp51S9v8UrUQt1cbvl6J6yGDnk/90ZXAbhe&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.taggiftapps.com/c?x=CosH4eBiI05olkF0oog/Pn5OLj5FU e60XbGFeIbCcI=&c=93SEEzIFRJJ0iCjY3H0WWpGvPsnJ9sgWRqp/8UkU10JE0MS40vSP7PiO6aOiNirfdIkgZ72GNAov9KkPaxQYbQUO/yzCYEmRFmm3fCbgpRuC9SCFNjBGNvye4zXsV9e7&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.tagpresentbody.com/c?x=Z0OJHueQ 9b0t4/F 1KZlZUT7Fz5QwG4d818hrE2oiQ=&c=K1/lcCE/ZodI/mjB//DYHUMWG0XCvVaccdGh8eDbq1jELHgcZGe9XSnEa32GlRxVuDcIi 0x8GNsi3a1hWn1i0G4TDIXsMBko/j/EaJJGPSsIyANICeVPzCNy267Ipvl&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.funtowersgift.com/c?x=677e5ycHa9YP9zflx7PYdnTxC0b1lLM71KBtxoRDo6k=&c=RpjPlyGQNhjvb1FGsF3WvtsS2cqnYcr6th1iOj4j29y4RLIm4y/ZIBXICRiJAh2PEH3rkqBugwQxQrRra0eYuGKNsLeF0grbs0nRkjafS7R5lJEDRzeNztnEOJzOZVwi&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.cleanbestsoftware.com/c?x=r1j831swsQ/KnRFhj6vbgcit5U2LfE7aO7Dm6Go3kQU=&c=QE4Mb9GxMu9vQMEtITGqVI29jqd4pnxWMi r9WMutgkFWID nIJF2kbJuf/YH4wIY3jQtx0BknBW4uecObX0PZq2RJhHCj5gtPQgYm6ZVCOI46vuT8JS0pQj8h6U UWb&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.worldnowrepository.com/c?x=g AvnOdHxQ jcGogutWpiumG46Qai43V a2R/1R5Xik=&c=UjWDEqc0VscbFdHQc0YQbOsnVloNXvuwpq/jxqEmNgx8vTi8LAgk6COwa/SRsMveutK Jpf4hf IlYYillUnBwnt T6g3ROvmUigXU5wtbiKpZNHwI9/A0rU6o8dO6pR&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.worldnowrepository.com/c?x=MXCWtlU0tWmi93PlreGtE1QhzOZ6pEAx2HQiJQndm 4=&c=O1/XkwO7Uhxwz4Y3hF3bT797IKmqixcVSci8cl8S4DmyUTmZUETCcDFcFTMEzpIlKA8CPPaPmRVeQVQasA4/jBv20lmvGxlSe0j5wmlnCvrSrNupHqkhuRPmMUMkpmzQ&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.tagbundlespresent.com/c?x=x6WgDioha2YOldG pfhX3KOpN5XGEyIhWQllrbZXiIU=&c=Nbpt/4Pove6sKJL1dTPz8gkKh8KEketSqa0uG/J2n7QeMQH/p4LN1bai2zdLEtqyq9w6/dew8kuJzuhjdDhGikCsRAmfqI3aZuZeAXySyFz5ejx9kdgu781xw49rL8Yy&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.tagbundlespresent.com/c?x=f oK oCFVcyDMDsNbpIxCVaSl7TjdYvsnntz9Trrays=&c=YeIJ7z126W3xK6E1Yhi5 ic3Z/Wz6tUeUU891AyHEgApvoI q3pET8jlSyt 8OD3rw9v1SLcD50ICyWHrEy7od3nyZvj76gFCjbPYxU1UOSfeVaOZxF20Jf qc/bCeu8&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.tagbundlespresent.com/c?x=xMF607olaWeSeAZ zHvOSkYDOup11AQhhSmQEwbzsZg=&c=vZ4KwBwQzGHp8je5XHyTPxf37h PDY5i0UyvjrVId8MjrkHF7MrEDhRb3HnkiRutqY1CFSKA9 e/5ZNvMCznr9CrowRTWofAPt01GVpk1zToBdKplSN6P68/ANCe24Y8&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.binariesstockbinaries.com/c?x=mJPlqcK4emtqzu1Lgf 7Spac950HZCU76iWN4EN9puQ=&c=w506zOgwdFjhw1GwnQ64apUjm8UVjHOD EFrMR7iVwX7rkX05kAZ386rm5ncTuqxuD3TNJz3KQGRHPqniaYt4pntKumpHt538E/3y1dE9lQTygVLSqDLEW00MAoWC3Vb&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.metatagbits.com/c?x=g1SVShdruCVskGNijHeQg7oXYJhZXfuRb0zmopo0vsE=&c=kHe8AiWHB1Voh SI28qLPvPMuDJNrbff6iDXQeWEgLn/KfGB/WsL8XsNuDcacCuv2yBI roEzNa jrAnSKpUxUABjTAq4jqnUOFtW8JlF1OSSaA47T4yrYlbGt/cPVWp&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.conecptvaultsranch.com/c?x=Mua1zsZgO7V7Gma88cLudKKMOQ7YlmqEYdT34TfvW4o=&c=uIEWr76tf dbKTZooz5x 1ZRbrcYXnxqTIZhPmvpCS2R9/8ODj3WcU4AMR i97mvcV/UEfgrsOyVgaPh0bDkBUGl2B9gOToghZ0zDIu/fFjYMaUTSIFABUAUZmO50y4l&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.farmstocksafe.com/c?x=dpWi9IcMGAX3l0 9svvTW bjhGnxXMk2sfwJX3cFakw=&c=K6xvVbfniqsHPXK27Etm5P8X71eY2BYtRs2/8sVG8jcLxa/wDTnvahqPn2MwgEdjj7TTwnSPRYnKSm3/gYNQG8 mEohMmsKx/gdm zr2HOB9XmkrwYf3JezW8iU5Blqu&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.contenttowersfarm.com/c?x=o3jyfpoToI9i1Uz6fo0coRdHlD13h4NaRhdhUi2PtnA=&c=sS04YVvldb0rOKFu8jW31tVrr90RpTLjYaKm 1VjZLRwV/xba8fVaXpWUaL/D3F5JKjI2xNIDErnLWka1NzaJEEv30bHuIWRh8/0IzI57JKz1Rz/i6T4mrcw8PEMlTBD&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.conecptvaultsranch.com/c?x=ZNMxOXE4XvQX8YqEi2wVi9eEv8pv69GaWjSym 6cUMI=&c=uqY0EfdpeRsnMA80zeF/EhpSo4LBzQ19ZElbe9Nw 3T7j95fbes5ZW94Lp8/5IUiouGFie/NdMWnqslt7GJ66f7/Yiq8zJCm3Myjg/e5VYVKm6TqkXa27buBuGEZBd L&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.binariesstockbinaries.com/c?x=wQAe5nkrQIdF5v5wCm5m6sy6Xzb7UxoEQPT75i7d 20=&c=ZsQG04YHHC/IRgPYErwh5TF7VFULqG6uw2odSmYVS1eCyLwR2LNopa9Dzky J6T5GJ bJQm6nF5BAMhj 75pGw5 96ScYlNMhDnJzfWoo/q6J xnw9wXTcNcwtXYOuBb&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.grabbinariesfun.com/c?x=budBKIaer xrTjfrG9GJnMCKO7U y6w77YBA3qYtLog=&c=QTy1gFVU2AbZM4VQxWv9SCL0v3YmcjXHt6pSvbt9p4wbiBFYHg11p17neyCG3D//BTtZtLTB NgadiZOwQ64Pw0f NDCH3MFPUHbDDBsEPlKihPg0S2/e4FJEej /Nqy&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.todaycitybyte.com/c?x=ni9XwxRS295fTjWsR4y8JU7fIDQG0yu1wjh7YdBnVTA=&c=tfVP7UPYCWUQD3thjyPVCT7I7e 3BPOSX1zQXIbgfWnUxbl3O3SgTUcmmDSc/bwY6SujWmbWtsdYNJUlgZefOvWut/1 mV/VD2Jyh64R PEtRm tSCJ3BJLCEV/sUSk/&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

http://www.todaycitybyte.com/c?x=j26RCJCM fMGtVEV/QejZpUwh M5kG6cKy6FdCQb8ZQ=&c=i9M41GhYbzVVas9QN1xKUlfh8rQ7KIJmZIGP2tqNn PbYhTarVuXLTWJJhloCDg8oMF6AFNA6jOinI/LIvefaWixgUQnBk6wHxSn2pO2sQuQk8i5CzEFfSJcLc9E9eUX&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe

Remove bitzipper2015setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.