home

itunes6464setup.exe

iTunes

Apple Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Apple Inc.  (signed and verified)

Product:
iTunes

Description:
iTunes Installer

Version:
12.4.1.6

MD5:
c6f06b3b3e10037408a5202170132154

SHA-1:
e349fbcda3b3a246ebd5d67a8c44381ae1e3e0dd

SHA-256:
a8f8645038056b1c0502fedc185ffba19d70eea0ec789522c8ceb059860405b7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/2/2024 3:30:36 PM UTC  (today)

File size:
162.6 MB (170,473,288 bytes)

Product version:
12.4.1.6

Copyright:
© Apple Inc. All Rights Reserved.

Original file name:
iTunesSetup.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\itunes6464setup.exe

Digital Signature
Signed by:
Apple Inc.

Authority:
Symantec Corporation

Valid from:
2/24/2016 7:00:00 PM

Valid to:
2/24/2018 6:59:59 PM

Subject:
CN=Apple Inc., O=Apple Inc., L=Cupertino, S=California, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
0EBC1935D5294A594B4F32707B0A0AB9

File PE Metadata
Compilation timestamp:
6/1/2016 8:37:12 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3145728:oNkS4cmaQOSNVBww/TLi3qUAHsX5o0p8QHDQOdvMyyePaxDkp/jK:oOSWPNHww/SHAHUq0p8oxqYP2Yp/jK

Entry address:
0x8340

Entry point:
48, 83, EC, 28, E8, B3, 56, 00, 00, 48, 83, C4, 28, E9, 1A, FE, FF, FF, CC, CC, 48, 89, 0D, 45, CE, 00, 00, C3, 40, 53, 48, 81, EC, E0, 05, 00, 00, 83, 64, 24, 70, 00, 48, 8D, 4C, 24, 74, 33, D2, 41, B8, 94, 00, 00, 00, E8, 44, C9, FF, FF, 4C, 8D, 5C, 24, 70, 48, 8D, 84, 24, 10, 01, 00, 00, 48, 8D, 8C, 24, 10, 01, 00, 00, 4C, 89, 5C, 24, 48, 48, 89, 44, 24, 50, FF, 15, 27, 7E, 00, 00, 48, 8B, 9C, 24, 08, 02, 00, 00, 48, 8D, 54, 24, 40, 48, 8B, CB, 45, 33, C0, E8, 35, 6F, 00, 00, 48, 85, C0, 74, 3B, 48, 83...
 
[+]

Entropy:
7.9999  (probably packed)

Code size:
58 KB (59,392 bytes)

The file itunes6464setup.exe has been seen being distributed by the following 50 URLs.

http://lb.cdn.m6web.fr/d/c/a/b7754f2666e66b8dcb74246fffff5601/578ce9b1/soft/.../itunes-64-bits_12-4-1-6_fr_11140.exe

http://filehippo.com/download/file/.../

http://www.repositoryworldapps.com/c?x=qxZemHdAgJGxmq9sJkthzYk7RHpnKL6xT6/fGDhQtKI=&e=0&c=svvY7ZpOEnrF/gaJi6KAioyXmVSCKEBWeJbAhZnbZ2QgNx0ijFculA9jcaEVX6RnxCPLRPHDY8kUVfki33b8fluMTPiguxIDtpW0CSAe8DGJJvFX2KTe4Jn0nmiq7Vd7Ugp8H3VbVy1FIS2dLyXrDUY5QLNMpMWLsYnrwqCSaZ0=&downloadAs=iTunes6464Setup.exe&fallback_url=https://secure-appldnld.apple.com/itunes12/.../iTunes6464Setup.exe

http://www.factorynewclean.com/BcZU2N8KJk0aD6OoNURWj0yX ovbiDaASB59ZH4Ch_GXqO_dXyz6F3kMBGE60Xbeguj5xdaigldgzuqwEPs bSGmGAcZZdtH7SK9ZuzjwJ8nvfyzo8TYt_wI7CETN5eDQGmo zXq11pcuWIv0AJjJ18sb7kn5BCYQJSHWaYNFbD6tter_ZU2hNKmmgoYhjJZwqQyt2GY-G3UAAOToHNLdR2MOZAPshA04cNkSGwfBAQccPGQlvDAbkfv73iche DYkHqdawSaZMNwP2tzMU6oYKAFZ67PX0015WByMjQlCtxRBoxlDT55AV4yow03zBWRDJVI11LLsrmfHZu_AQ==

http://filehippo.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/a46faedd92edb41d9fc6b578d4973c95/5754ce62/soft/.../itunes-64-bits_12-4-1_fr_11140.exe

http://filehippo.com/it/download/file/.../

http://filehippo.com/download/file/.../

http://www.filepuma.com/file/1466247350c11816/itunes_64bit_12.4.1/.../0/

http://filehippo.com/download/file/.../

http://www.filepuma.com/file/1469240957c12213/itunes_64bit_12.4.2/.../0/

http://filehippo.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/d4fff164cfa1ac3e9ea0cd2ceb7fc588/5784eb08/soft/.../itunes-64-bits_12-4-1-6_fr_11140.exe

http://lb.cdn.m6web.fr/d/c/a/c5c3a401e02cea935300e287711d181b/5776959f/soft/.../itunes-64-bits_12-4-1_fr_11140.exe

http://www.filehorse.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/e629b7438007d986f8ce2c339290ffef/57740330/soft/.../itunes-64-bits_12-4-1_fr_11140.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

temp:iTunes6464Setup.exe

http://filehippo.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/eda10fbd2fd843d38514527c2974e9c3/578a8273/soft/.../itunes-64-bits_12-4-1-6_fr_11140.exe

http://lb.cdn.m6web.fr/d/c/a/f1402c1a66082a6342d435fc92cd7128/576ff04e/soft/.../itunes-64-bits_12-4-1_fr_11140.exe

http://lb.cdn.m6web.fr/d/c/a/6c205ab80ecb10be9a0de665b835fb51/578ccbf4/soft/.../itunes-64-bits_12-4-1-6_fr_11140.exe

http://www.downloadcrew.com/?act=software.download&id=46&t=1465759180&c=72c5a85a905b01e9d0933cb09b5e4dbfea8c111e

http://lb.cdn.m6web.fr/d/c/a/21de284afd8ff5273db4b6fe32edab30/575cce7f/soft/.../itunes-64-bits_12-4-1_fr_11140.exe

http://www.techspot.com/downloads/downloadnow/.../?evp=533110cc46ed5462825eedd275dcf170&file=1

http://www.filepuma.com/file/1470169220c12213/itunes_64bit_12.4.2/.../0/

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

Latest 30 of 281 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.