home

itunes_setup.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from itunes.download-file.windownload.net.
MD5:
eb785b8ad61694878777129010958c7a

SHA-1:
eaa386b5f69762a3c1f8f24851f30ae6a8941bad

SHA-256:
1608078d7d277ab71cef1c9ded1f76fb2a1fafe6c79efd965e62120dee36e772

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:44:43 AM UTC  (today)

File size:
647.3 KB (662,840 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\itunes_setup.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12288:tSVV++kyyWKC8fJqQERi0infXUsFah7AviBCA+tPkUpqmRIXJgLI4:0V++kdWK5BqQESn/UsoLCfrG5Z4

Entry point:
E9, 5E, 79, 01, C3, 58, 9D, 1D, C1, 9A, ED, 68, A2, EF, 5F, 4D, F3, 00, 43, 17, 54, F1, 6D, B8, ED, 90, 36, 63, 23, 19, 07, 63, 37, FD, 44, 3F, 05, 94, AF, 57, E6, 8C, 2A, DC, 8E, 5C, ED, 5C, C3, 78, CB, 9B, 9F, 9B, 52, 5D, 35, 34, 81, B7, 14, EF, AC, 12, C3, 9C, 61, F2, D5, 0A, 6A, 49, 8F, 21, B7, 4A, 20, 37, D2, 2C, C0, EB, 64, EB, 00, 0C, F7, 58, 6E, 8E, 8E, 82, BF, 1B, 56, BF, F5, 0E, B7, 5E, 34, 20, 36, 08, 74, AD, 82, 31, A7, B1, 9D, 48, 3B, 55, 21, 5D, 38, C8, B7, 1A, CF, 82, F6, BD, 24, 86, 39, 39...
 
[+]

Entropy:
7.9300

Packer / compiler:
Xtreme-Protector v1.05

The file itunes_setup.exe has been seen being distributed by the following URL.

http://itunes.download-file.windownload.net/download/160/.../

Scan itunes_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.