home

259409_stp.exe

iTunes

Apple Inc.

This is a self-extracting archive and installer. This is installed with multiple programs including iTunes. The file has been seen being downloaded from filehippo.com and multiple other hosts.
Publisher:
Apple Inc.  (signed and verified)

Product:
iTunes

Description:
iTunes Installer

Version:
11.0.0.163

MD5:
0e84948abba77bba6f1a276bf38ebfa8

SHA-1:
8064c57911309934bf7f6ef15312c0a1f231daf8

SHA-256:
110fdbb0d40c946c9e6676d6713ad46dd379c05ccc2ba91ea1f2364acc18d792

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 1:50:19 AM UTC  (today)

File size:
84.7 MB (88,840,600 bytes)

Product version:
11.0.0.163

Copyright:
© Apple Inc. All Rights Reserved.

Original file name:
iTunesSetup.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\259409_stp.exe

Digital Signature
Signed by:
Apple Inc.

Authority:
VeriSign, Inc.

Valid from:
4/15/2011 2:00:00 AM

Valid to:
6/26/2013 1:59:59 AM

Subject:
CN=Apple Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Apple Inc., L=Cupertino, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5FA2A6E514B187C52E1FEA5240CB04E9

File PE Metadata
Compilation timestamp:
11/29/2012 10:48:11 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1572864:yF5b8ozl2pTsmoi8+3Y3/gihScV8AcES008TZw1UuBAxAgCpg18ZD5U7KvrODK:yUozUdsLi8+3Y3/gmeSE1URxepc81rh

Entry address:
0xDF28

Entry point:
48, 83, EC, 28, E8, 97, 50, 00, 00, 48, 83, C4, 28, E9, 1A, FE, FF, FF, CC, CC, 48, 89, 0D, ED, F2, 00, 00, C3, 40, 53, 48, 81, EC, E0, 05, 00, 00, 83, 64, 24, 70, 00, 48, 8D, 4C, 24, 74, 33, D2, 41, B8, 94, 00, 00, 00, E8, 6C, C9, FF, FF, 4C, 8D, 5C, 24, 70, 48, 8D, 84, 24, 10, 01, 00, 00, 48, 8D, 8C, 24, 10, 01, 00, 00, 4C, 89, 5C, 24, 48, 48, 89, 44, 24, 50, FF, 15, 57, 72, 00, 00, 48, 8B, 9C, 24, 08, 02, 00, 00, 48, 8D, 54, 24, 40, 48, 8B, CB, 45, 33, C0, E8, 19, 68, 00, 00, 48, 85, C0, 74, 3B, 48, 83...
 
[+]

Code size:
79 KB (80,896 bytes)

The file 259409_stp.exe has been discovered within the following programs.

iTunes  by Apple Inc.
Apple's iTunes is a proprietary media player computer program, used for playing and organizing digital music and video files on desktop computers. It can also manage contents on iPod, iPhone and iPad.
www.apple.com/itunes
9% remove it
MyHarmony  by Logitech Inc.
3% remove it
 
Powered by Should I Remove It?

The file 259409_stp.exe has been seen being distributed by the following 50 URLs.

http://filehippo.com/download/file/.../

http://www.filehorse.com/download/file/.../

http://filehippo.com/es/download/file/.../

http://filehippo.com/fr/download/file/.../

http://www.filehorse.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ0MjYxNTY0NDtzOjI6ImlkIjtpOjkyMzY7czo0OiJmaWxlIjtzOjE5OiJpVHVuZXM2NFNldHVwMTEuZXhlIjtzOjM6InVybCI7czo0OToiaHR0cDovL3d3dy5vbGR2ZXJzaW9uLmNvbS93aW5kb3dzL2l0dW5lcy0xMS0wLXg2NCI7czo0OiJwYXNzIjtzOjMyOiJjNDc0ZDYwYmNmYmIwMmM1MjBjZjY1YmYxMGUyOTA4MiI7fQ==

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ0NDE2ODg3ODtzOjI6ImlkIjtpOjkyMzY7czo0OiJmaWxlIjtzOjE5OiJpVHVuZXM2NFNldHVwMTEuZXhlIjtzOjM6InVybCI7czo0OToiaHR0cDovL3d3dy5vbGR2ZXJzaW9uLmNvbS93aW5kb3dzL2l0dW5lcy0xMS0wLXg2NCI7czo0OiJwYXNzIjtzOjMyOiI0YzBmMzFjN2I0NjhkZjQ3MjczOTA2OWU5NzMwZTU3YiI7fQ==

http://filehippo.com/download/file/.../

https://secure-appldnld.apple.com/iTunes12/.../iTunes64Setup.exe

http://download.download-new.com/download.php?id=09ded5ae503525526d4a5b136cd18b39d392b34f&z=0&p=eyJweSI6ImR3IiwicnMiOiJnIiwicnQiOiJzIiwiYyI6Iml0IiwibyI6IndpbjciLCJiIjoiY2gzMSIsInVfaWQiOiJkd181MmJjMDVkNTZiMDkzMi43OTcxODM0MC43N2E2Y2QyNjJmMTZkNmJkYjFkYjMxN2E5ODBkYzkxMSIsInBhX2lkIjoiMCIsInN0X2lkIjoiMCIsInNwX2lkIjoiMDAwMC0wMjYzIiwidHMiOjEzODgwNTM5NzMsImt3IjoiaXR1bmVzIiwiY3UiOiIiLCJjYSI6bnVsbH0

http://filehippo.com/download/file/.../

http://appldnld.apple.com/iTunes10/.../iTunes64Setup.exe

http://appldnld.apple.com/iTunes9/.../iTunes64Setup.exe

http://www.filehorse.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQzNTg3MDQ1ODtzOjI6ImlkIjtpOjkyMzY7czo0OiJmaWxlIjtzOjE5OiJpVHVuZXM2NFNldHVwMTEuZXhlIjtzOjM6InVybCI7czo0OToiaHR0cDovL3d3dy5vbGR2ZXJzaW9uLmNvbS93aW5kb3dzL2l0dW5lcy0xMS0wLXg2NCI7czo0OiJwYXNzIjtzOjMyOiIzOTM5MzJjYTM1MzRjMDYwZGZhZTRhNjZjZDY1NjU0MSI7fQ==

http://www.filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.filehorse.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.filehorse.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

Latest 30 of 147 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.