home

itunes installer.exe

Application Installer

Criteria Quality (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application itunes installer.exe, “Application Installer Setup ” by Criteria Quality (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. With this installer, users are expecting to download Apple's iTunes but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Installer   (signed by Criteria Quality (Fried Cookie Ltd.))

Product:
Application Installer

Description:
Application Installer Setup

MD5:
ea78041a7f1f11a400e455555b73f73c

SHA-1:
1296af938ea6b5dcc5d19393a45ef6d3c42462e6

SHA-256:
6f17b6a9d85dce4942f6c7da91b66f2ad973dd4164575a8254caf34eefe108c1

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
7/2/2025 9:16:21 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.15.21

File size:
969.4 KB (992,656 bytes)

Product version:
1.2.7

Copyright:
Internet

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\itunes installer.exe

Digital Signature
Signed by:
Criteria Quality (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 3:21:34 PM

Valid to:
6/29/2016 4:39:55 PM

Subject:
CN=Criteria Quality (Fried Cookie Ltd.), O=Criteria Quality (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11216ABCF20419312093F809F0E003C850D7

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:ON7LKXirSl5g5MYuHz9GNh6zCaWM4UEIBtot+k2G:OR2XirSXXYuT9GrMDE6Rk2G

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file itunes installer.exe has been seen being distributed by the following 25 URLs.

http://www.currentbulknew.com/c?x=ffw jvG EPxsBV/bs/ RqlSfMFJb6waS94eN1u8XfN0=&c=5Dim/AMh7 5LWFfkUkd590vsO35u94vu6UbHygSkvjJVd1yPHqKMCJDToUevg082af9Zcln3TMKWCNzcJLkLUsVz/FxzELYnKxO19EPIkoV5NRdGCvW/X68FMoWWjMSF&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.presentdownloadcontent.com/c?x=ybzJhr2aoJW v23Yt7dr8abDSBIgn8e5KvoKGmTeyGE=&c=0jf/ZxQc02Kv6YAo9V Em8cvCQRvfZUVzr/iQMntXt/Ds48EudBFUYzN0QuYtWPik/ShNfMCrM6Y0ofbdShRiZPuNfYHQyfOmp23Lom SPs0yON9Z5suTgRW Nyn0nwl&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.chucklecleardownloads.com/c?x=AwZzdAadK74YQiT8H3FZOP0AaC5peACllLyKAoylZz8=&c=z5qsCnj1zxTvS5EhZu9uxE/L6D1GYThcEZRLvMmM5mlAksIJ2EgdqLns5OZjEw1T5N5moy2t4KJmXjS5xc8VpNR8t/aQMdelgZ07Y19fMQ9keJaCoq6pLOYYJyzHtvZC&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.grabdownloadsapp.com/c?x=jqd4B867wCXD 0kaZmgAzVwgIKx/fIvEwIkwsu38q0c=&c=95zc76Yf4kv0SbeQDV 2Pfj HxQU2PBC/C4pIFNPIYtmMITZQXRou/6Vth47qKUKrGUf47e3O25BxNMJzuWJLySPpt3F/1u4qLfO1lCKYFfhPyvsZDczWzFJMMmWxmd1&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.presentdownloadcontent.com/c?x=tt8KhkZ2Sixtb9a9nhhWASkRiXO4wvyfEHDQUtNzv0I=&c=MnLvs5HjcTLH3Ke57cqEjSA8I7EpX/A7GExKmLH11 hOcBvmFWkBWzkKT/QgzPzIqdF/AtP258uvc9vQJg5Qa0d6LwOSZW34v0DdnWaf3rs7eNUkUL6bje8mywFsMgSZ&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.grabdownloadsapp.com/c?x=Hk0/RS/1W eCQeWR7/Fx/Pbd4KjSsgbQN ELhgDX91Q=&c=HpIHV3ic7dRLBYa8mDfEJuDMSAzdvRRaEkCqJcJ96HMQeN2RSmJUIblp4un1esf DzpuKaeb7WmslCZUnCrO24W28P0vmPij7Gj uNTJll2eqD8HHDT0AvMKHr8AnMvz&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.chucklecleardownloads.com/c?x=hNIXZt9 tiHKciyKf34scesk688cHw4DAHkJjGIHSDk=&c=43mhDbaM5eVLe5 AbfUOBBRcZCjr6uoFJZGUKavMIx8KT GsJeL9hSilQ3pGj8pljBrMIUU4rwL3B5JCw8gfjTvHYul9kOpnyJWQoPd2A0/MJK9ezn6vw8AIujzn4XXm&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.grabdownloadsapp.com/c?x=V mGESQM4FLfw3uznPQ/OKeoma5oiy9AjY08feS7e3g=&c=Ej0mV/e8LV1mXAIxVq12AC8ID0xTkOxhcsQj28rUhDbWN1ADk2tO637qtIYSTI47Hc/kmQVy0AQPeMzobWZV76hiVtDingxx/C7YI2sHGTy/I9Lo8R7WpaOqPkoKpehl&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.chucklecleardownloads.com/c?x=tp0Qet/Qqy0gtUpwosAz9u9b9OaN4bZKqXLj6wR/RDA=&c=3TE0IgFU2RvlD1QBS8by9 4fGYQEnEo99l9yp07/Zlf4q5algDr/DrozfZb80Uhdph29jJ/53v7wrkyw2M2ihpwiDXotTU/RjR jgSXYXW86LlqI2IzrYD953wtOpmDF&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.currentbulknew.com/c?x=ftgua00qYUQTBhsDPscFx4MCJ5GQcOhkV9 uXmDwKVI=&c=2BQDz5SWtKSbs5BK76XWltKyHukF1cjRNbgRhlS1ubA4wHBGYFjU3LhAz89fK FxkTBNtDWuF31vubRTmmbEB/zApEZGgmDYLDDsic3OwlXgEznwo3dPSG7 ycmrV WS&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.grabdownloadsapp.com/c?x=QQkHhFvIe/LA8HaQsG2EM0VCbcsPOZ5nWZu/Tla3Ghg=&c=Ra YdE1bUGn6P7GvhMHDNBWelnmzFdvbgPPqoK4kx9l3PyleVwfZcFkcIqkVRZYajDE4G0MaFH0kM47VAuoIeCNx7kOO648F53hYSesRJkkvoDSqgv8Fy7 gs4FRAo13&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.chucklecleardownloads.com/c?x=KVj1t3yWLLDO24O8cEr7yYmwSdv4O099MMGsd5bo2Xc=&c=5LDKPJxwXXvqEPzG5fLNmZ/kFsMTFyactaDoR7z48HNIcwf2W1DWKqa5zRGZH9N5MFfA9DUFd8DI83QQAHOKiMzrJnEiZwcaMqVUNjveBGiHCJ umtz4cRf1j/KOeCOa&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.currentbulknew.com/c?x=pWQklyFTq82rdD2bJRNSXUDIlz9SDWxlWbZTTg7MDRs=&c=Z0bZwgf4a/92a/DHoo5XwsJ9GVyLtuZZCl8z7AcqBFjo787R/kW262V0WNXkei3pkdhfUsaZcNSXVCN MqdBxYpaVZfwTUldoDP O4h1dEuQSEnnw1kHdQpt64M7 DZT&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.chucklecleardownloads.com/c?x=fOxxeCOZi/mZCUJV62fGsSLkq8HoUWVNftTgixGxEXk=&c=AJrVMBdjPfHaY6tLM1yQJBx6r58md8AWvB8s xswdtNZC345cVWa7FCDxVCKOYEK0JD7XwtI18lnPvBzNsoJ6nURbACj5oFzyZ73EypWFBnON /9MRK3J9VDMWC96sSV&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.currentbulknew.com/c?x= QbnRO3l/vCBMqmGsLkhs4A1raXPl3e2FCtTJzsHCOo=&c=p/llMXRqwATHZaOysuHJWhNYTAzv5mJD0TZVzVL2Y02KJWkCgCffUssgh7lOZeGemEj9TX8xgslhFG 6zmtns3/DEwCYo8UKfvHM2VvtH9Y/v6GVfoj/Xd5M4s3Xeaav&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.chucklecleardownloads.com/c?x=pYXjGxGC/ABnYZoppVObghRIgz7dBSracAa14wt/MXE=&c=KjGK7SwXSg09swQLwe4ocW5uve/BxA/7P Q/eHBU8M6yhfHwevVhfqQmB h0/hR8wfyfUBuMfNocPOxdDFenZRVRbjYh4 k7j0c0C1GqAXTXgBe VVAzHOKpYwdpuIaf&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.currentbulknew.com/c?x=6TsBv5/SV6xkJG ac5ymWrbnHjsEiale9WuL9q0Heyo=&c=E8mv4P69a/e/s3W52nlYkOf1PV11 jczZdotpvbWSD7GpEPcYkxP5S3dFurfr5iOfXUgZihKbi5Qj7X69aOpNAcyQBhWcbNpcpg2bi/2V5Hwf4A/4N1uKc1sfhfXldUZ&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.currentbulknew.com/c?x= J2NKdMpe4qkQLOLWLbiQbmeE/e8izU4Dc4ANI8HODc=&c=WdZcePSUwP7hHAcSdH5mTBpjf A57zye2yMO/oTclotFGPxzbM3jM7 LIcjVT3M4JL1nuPq7 HGcsaGQ6oMfomGC6cGQJBEX6SYnD9on teUnCAv9iJElbhX1QQoff g&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.currentbulknew.com/c?x=LjF6/7Yq4OSzAsvRr62ChHv47M5LYk/SqlHpLQpViHg=&c=ixBFqMnob8/kdaIb3tAoqXQQY3kf4j3X699KEe2kYZms0KkjoY8x2kaXJTOhXLmdDm jmlQu/Y GdM8Zddlh588azMP0/ vBQNrVFgxahRXPinvi9lci22xqg4eiomQ8&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.currentbulknew.com/c?x=nRpY6SGtPGZ44kJnvXd5GjjIcT4jIlNPgtqWR5vcG1I=&c=htiJb l196HXiVFmi36O tXxF3HZfSMeR5DWQeGlMcUgxCxE38 9m4I5ngxEMJJrF6KYgXImg/fqfBTZ3jucH5WgUsJVHRqr0KWZdyZmJt9Vaul6DRVsgszhhrDVB3/u&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.chucklecleardownloads.com/c?x=LLx/XYqKajxqMLJCPCEt2 GkxiLPyPRFFf1 rzchjAM=&c=UX1LJnTwAylFvzazuOL9EGmO8fOcy/cxbJlLlsYOTggMTwmbX3r3TrlMPIFYY wZ6nbuxNZl0KZdAwtDPT7De/xAo9H8fVLYUHrJvVDNnCRE6HCHnbMgxHeljfBs0785&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.currentbulknew.com/c?x=T4DMAXc0RK03b66pbyiT52If7l3tLBNOX3HwpoeICYU=&c=borDl2CuHxcbU1DQxKWBuOP05udK2WWQyaSVP7a8VAZdQFwDR3/42wuH4EaYsc25cV6 0Hhn7xlUN41MAQGWywdn8jI3iXug2uN cnPNsKe/k6ZbxHqUvR70TmU8G1 s&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.grabdownloadsapp.com/c?x=0WjTC Yo9didbyC3zvmUY72OnEnRd4vWdeJyrzVA45k=&c=2s1ju3Huq4zyt63B42GuJ7z7G3FYx/T UfBQku00jcA3o3l3hLVbqQYjECP ktV1SntkTI3oaTvK0KkKAGmKzdLuBMKXl9tvWE5kEy6Wczus1wFbYgPNL26ukcJZ 4ir&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.grabdownloadsapp.com/c?x=BqSsIIULnMCoOdVDyZVrXhF FxZBFbCSuIJIvx9EM8E=&c=wtPujXVByEJSUilq8imigH3p3b04mEUP7n4sX4K3/l/PgjpmNP6oiz6rBp3uzL4cEzG3gJ1FTBd6ENBkZC3ZPl0MAtrQ cuvnK2MfGmPk3L0giQVGLb8pC5eE9tKg5Dl&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

http://www.currentbulknew.com/c?x=KfKn4uovzdxWCcnLzASnpM/uEsnX1Y6K3s/sWLocO0E=&c=WyWXj6tCF13Y/yIk7B//sgx qjzv67CXCtLHpDiyA81EcCI/zjTLLp32Q7EyyJZhFF1Ly8B1t bwPJNCHrqmwH2e03D IgsVcVTIr3GIWWhvU3P12ZCRa11YPZm7fJjq&downloadAs=iTunes Installer.exe&fallback_url=http://cdn.darwendlmfilesnow.com

Remove itunes installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.