» itunes setup.exe
Overview
Analysis
File Details
Downloads (10)

itunes setup.exe

Application Installer

Criteria Quality (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application itunes setup.exe, “Application Installer Setup ” by Criteria Quality (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The installer is marketed through download protals and search ads as Apple's iTunes but will also install additional software offers which include adware, PUPs and browser toolbars.

File name:

itunes setup.exe

Publisher:

Installer (signed by Criteria Quality (Fried Cookie Ltd.))

Product:

Application Installer

Description:

Application Installer Setup

MD5:

49bbdf734a780c4afe1b7302b01b1867

SHA-1:

05dc4ba7a38ffa591fc9086f63870d5e9cadb1c1

SHA-256:

60c601abc0724664b6f734b8722b85e0e95fffef37a62291067d5d6d0f62042b

Scanner detections:

1 / 68

Status:

Adware

Explanation:

Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:

This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:

7/2/2025 11:26:22 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.InstallCore.Installer.Installer (M)

16.1.15.18

File size:

969.4 KB (992,656 bytes)

Product version:

1.2.7

Internet

File type:

Executable application (Win32 EXE)

Bundler/Installer:

installCore (using Inno Setup)

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\itunes setup.exe

Digital Signature

Signed by:

Criteria Quality (Fried Cookie Ltd.)

Authority:

GlobalSign nv-sa

Valid from:

12/16/2015 12:21:34 PM

Valid to:

6/29/2016 11:39:55 AM

Subject:

CN=Criteria Quality (Fried Cookie Ltd.), O=Criteria Quality (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11216ABCF20419312093F809F0E003C850D7

File PE Metadata

Compilation timestamp:

6/19/1992 7:22:17 PM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:IN7LKXirSl5g5MYuHz9GNh6zCaWM4UEIBtot+k2G:IR2XirSXXYuT9GrMDE6Rk2G

Entry address:

0xA5F8

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55... 
[+]

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

39.5 KB (40,448 bytes)

The file itunes setup.exe has been seen being distributed by the following 10 URLs.

http://www.currentbulknew.com/c?x=m3jfBJi04rV4r4Uvne8bD8aiHlvB0aMSk2sN4NfoG2M=&c=isGFOY2pFkd5ifRA2vtH1pMFzzCnOT9q0DfyZop 1vGKYnIDfoP27Ka8hT/.../eY24oAHrJhDNieqDUvTtUZvmtlAKfmKy11mTpyG 2T0UnF60Qb1Kb&downloadAs=iTunes Setup.exe

http://www.chucklecleardownloads.com/c?x=VRNFVBQNgBq5vlF0HBhSjAPaMToOulNqx1Cv0zD7HFw=&c=3/.../KaFs5Q3q&downloadAs=iTunes Setup.exe

http://www.chucklecleardownloads.com/c?x=QwXtX2IGqqf x596Wilp VMtZkgEYl2QbvbEdVcgyL0=&c=jY41T0RvueU6 fC5iqes/aJNaCHeCepl/qiaGiT6ZF4Kno4nok9QA1wJ/gP MNaHYqi46F/.../lofxRdi cvXL62 &downloadAs=iTunes Setup.exe

http://www.chucklecleardownloads.com/.../eWHK4BMhQQke97rPKh077MYI=&c=HT0wfVarcCDVcTRQq Cx 3CT5VtlhcplB6wEktn3j7hVdIwpBEaYuntsZQGDxVahU1xQJE8bweoGAHkmZJgMOr9gSNUMhXuseL28xWNiNF0ULf4cLpr6LlTk9NUp4ChG&downloadAs=iTunes Setup.exe

http://www.chucklecleardownloads.com/c?x=8J0dSnGZOF/ichi1jTihyKnPlHGApLI8fpue8nPyTbY=&c=dlPh2S8GH2Gl4lzH8RwELWHe1VwN ChCzRqK3L042FqiwPyQYF3x7Eq1IQwxHa Tkdmm5H/HR779iCKy/r/.../r3spVfFU8xfIWY7HVJwl&downloadAs=iTunes Setup.exe

http://www.currentbulknew.com/c?x=HRpJgF6AZo0LKw7nG2B0U0h09cJ1/u8lONI4elfKpDM=&c=Y93V90qAZP4RWVAKqdfX5VdKYcTcPu4P3DJiZhaMhs9l/.../O473mNYxAZ37q&downloadAs=iTunes Setup.exe

http://www.chucklecleardownloads.com/c?x=Ji/REKlZvrSJngUH5aVRRR3Qr6beS6V54yoUi77KWPY=&c=WorQsgfoRlMOjn/.../v8tdUR 8cq7br5cSmxvaL0uEzaTH58ggqIFqR1vKno2S2&downloadAs=iTunes Setup.exe

http://www.chucklecleardownloads.com/c?x=2KfITGnhyJpHyezjo8TTdjA3MLaS1T HEs5UarnURF0=&c=5aRX4e5/.../6IRJlCausRFMumEEjLIgB5PK5lUfBxHvl7NORVNV0u1RyM71Bih196DjgVinar8KUx23lQ0eVWK7ohKfMOOrw6763lrhK8knfEAwy6Djv4QYp2&downloadAs=iTunes Setup.exe

http://www.currentbulknew.com/c?x=0w/EeCCL8sllLk1PkRXrCtI0bxg1xu4U89io8/etN9w=&c=PhbtKCoPy2SPuuQ1RbjRK8XYWq/214gks kab0pIq7Ge9kYiUUI9a8OZ6HoG 5GUFqw6slACD/.../VD&downloadAs=iTunes Setup.exe

http://www.presentdownloadcontent.com/.../y7JpQoQyVsF1hqSpjaWMo0BlDnzzY7LL5cvXBqJZMCCzAIq2WKGEfCGJcAHEstVQS0R4Q7 JUV zNMnjtfNuRuJ2nOPNiLypVjjpC&downloadAs=iTunes Setup.exe

Remove itunes setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.