home

iTunesSetup.exe

iTunes

Apple Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Apple Inc.  (signed and verified)

Product:
iTunes

Description:
iTunes Installer

Version:
12.3.2.35

MD5:
2934443f1c31325bcba6bdf3449cad4b

SHA-1:
390045f3b1f8562030fb93cff5fe26d7031ce2d4

SHA-256:
04cb63e51153ebc17475fc0ae8770b165ae823d0451ac3063bedd6d549208611

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 7:04:10 AM UTC  (today)

File size:
112.1 MB (117,524,248 bytes)

Product version:
12.3.2.35

Copyright:
© Apple Inc. All Rights Reserved.

Original file name:
iTunesSetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\itunessetup.exe

Digital Signature
Signed by:
Apple Inc.

Authority:
VeriSign, Inc.

Valid from:
7/28/2015 7:00:00 PM

Valid to:
8/27/2017 6:59:59 PM

Subject:
CN=Apple Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Apple Inc., L=Cupertino, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2B20EB3380792AB011F662C064FDB473

File PE Metadata
Compilation timestamp:
12/9/2015 6:08:25 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3145728:P3MojT1PnRuwzXQ5o5yzmnJvswQRZBmEg:P8o1RuwrQ4YmJiR3mEg

Entry address:
0xBA63

Entry point:
E8, F4, 55, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, A3, 14, 8B, 41, 00, 5D, C3, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A1, 00, 6C, 41, 00, 33, C5, 89, 45, FC, 83, A5, D8, FC, FF, FF, 00, 53, 6A, 4C, 8D, 85, DC, FC, FF, FF, 6A, 00, 50, E8, E7, D1, FF, FF, 8D, 85, D8, FC, FF, FF, 89, 85, 28, FD, FF, FF, 8D, 85, 30, FD, FF, FF, 83, C4, 0C, 89, 85, 2C, FD, FF, FF, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF, FF, 89, 9D, D4, FD, FF, FF, 89, B5, D0, FD, FF, FF, 89...
 
[+]

Entropy:
7.9998  (probably packed)

Code size:
71.5 KB (73,216 bytes)

The file iTunesSetup.exe has been seen being distributed by the following 50 URLs.

http://lb.cdn.m6web.fr/d/c/a/deb838a2fa70b6d7b6eaa63bd8513b44/56fea7a0/soft/.../itunes_12-3-2_fr_11140_32.exe

http://indir.gezginler.net/i/2865/.../

http://www.alindir.com/?miror=MTQ4MjI2NzM3NTsyOzU2Yzk5OGY5NzQ3YWU=

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://dw.uptodown.com/dwn/LrojRyMMSUVYX1eNzrv34RpZvhx5l4r4vvMYyzhlfuDlBRdCw9M1U9IEYgrA8umvfHnrX9xUhGtpK-QgF1G9l3wqnLHwPS4MapOdq_W5ADyRu6TKsw1k2uqH2BzvHPPs/I9Pt1s4QF9Csl11jtasMmjdFdez4xdubBMOQBM5pRNBpFscYkm4Uov4WnhihmVZrCvV8oNHPScDAr9hqrGbvQ402SQjfnivwl7sbkSZznR1KWteIdNWBMq3vAKaiYskV/.../

http://dw.uptodown.com/dwn/utYW-3mzEIy3-0L6dGTDFpcqGw1UnzGF9voDIzhVPOvXebYMzF-h6oFsvfHlnINJGVWOeUGEXMln9iHUXMAEG1a64P2qKQxBZ12puM63oWx9ucZ71tHXQWEqQtSaMbVB/-3910xArhTIuRnKhDHkmN7qOM5WaoPhA0UrBjmJlHlQahyE1Z8mSF7DKN9kLpNJ4O2RQ0jlQ5hHwcP20bdub6bT59eFlO4097eMLefJ0BYj51dUoEkGbgBD8qAbwOPeQ/.../

http://dw.uptodown.com/dwn/AEvJM_gFOEPhQHgENAfAjTWDw5SDq4BzAyeLWXRhdOgPkIg1QGMZ4NFKOAwTkkXUUDCxkdxql6wZ96dMgQ1uxwzNANFFkacYnTsIYLx0hd0-zZTHox5M1_cjGQEr1cBh/xjG2BMZvPMuPfB4OZqdAMVb4bGdn34X7GunaQYppfCE9QztC9mpeQvKyKifVAsLVbBXiXiuPkperEYyuwh4qcg4JGCXFUkxjPTtO30u7jN9qraJ7AbOtOYw1YW4odsQt/.../

http://lb.cdn.m6web.fr/d/c/a/53ea0cf53cd2b3e6492c8d9da7ce7b1b/5734749d/soft/.../itunes_12-3-2_fr_11140_32.exe

http://dw.uptodown.com/dwn/e0d6YwDSMq4_GGJYDeMj9Ai-yQ8X2eGdEl_0iwQWMZum2nyfxueU7MOkIe3IaKWkWEnpUvZSLYfLqdIHwW8XArvv-3Y7pQ0ajwQvqocPZAO_MKbEiLxzN_8ZloLKWQM3/orCHFo__p1glh3g2wS1elWK2SFubR7GTGppSD4xtzoU8470Vyd8YdV9qnsV8X74OET0NTji7EPL_J0O__wltUCGLapfHjhbfATAfrzbQ9ig4EjCNK-iEdVIAR4SwRK9Z/.../

http://dw.uptodown.com/dwn/RrVkxgpyJ5lCshKR6Qo0iA4Sm7dL980gSxw2bIk2fYKNsdHq66Py_aBdAobOGaKYFki1IUpUtPksyFzejICLiY3sR3ffHnk-4RfFbxMvPWcqnRp-mwHy5w6PCLcUrgY0/TrXZdzex4keSrPooDjeN_zTJkNvIDv1mzQt20wDDWSqRXky_paBFlG733oMweWmFBqQWCQynedLsjBHp9J45ZV10K_GjtyOzFz3iVoqkGWAFmcOWHfM79esgPd2A-DmX/.../

http://lb.cdn.m6web.fr/d/c/a/1782bc24ec44c01f6f34d8a1242335d6/5710e1ec/soft/.../itunes_12-3-2_fr_11140_32.exe

http://filehippo.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/a7ef72dc889f95fdf78a2cdac87a4541/56840a86/soft/.../itunes_12-3-2_fr_11140_32.exe

http://indir.gezginler.net/i/2865/.../

http://filehippo.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/4f8907262a760d1393cd26d65bd41de4/56d74741/soft/.../itunes_12-3-2_fr_11140_32.exe

https://dw.uptodown.com/dwn/KjVZyzLgxaRsJyiWs4msDtJzdldBgpVjcfhNkRtnRqqcIGDnD5wK81lsSfLlOBaXMkbKJAHBQqsdTjxdecEnnlwqbolG2hL6jcWQ9MQZ324xdct_G5N8N4dlHKbY0Mal/mevoEzRgX9xJva-8yOrPc38uLW6sTC_DYcXCUjY-vtJJ2rweUcAKg72LSJj5g-rq0lhdGwNsev4wSX4QF9RNSvJmpIpp8uMj2Hvq6ZAZ1ItviyvAXlWioHMRu9NWl5fE/l9Gyr4O8nQDoc1OS-3BeSqsXgsBjyKqPjmgAQIZKtbZQLzxsB7vV_jbGafX3ftamtfIXic_jeX3R8DjW33mVdcl0xiQbaphhfTth25RsJW2q4eUKiZOyP4wly8wjwd5m/.../

http://dw.uptodown.com/dwn/z1J1Zv0pEIXk5jimNRMEN_eqOrU5kjbYQOr4U_h4D4jT2c4YG_dGN1XDJMViuBVM4bkVkj8SE9vo6mEK62CO1FF-5g9tUujtq81GHOhnkBek-Li0XtsinPkLtt90ilX0/NpgKtEDTg2UWs_vcUnVSZ-rVu1rh03c1PAHJGEVV0CCqFDGAVZh7QumjDaRsNWUc_eIvmbRG7U0ZTVAWPgMN6xfkXFpXlXVRk_aLEU9P9U8e8sUUWCCU00yf9dJu_lQN/.../

http://indir.gezginler.net/i/2865/.../

http://indir.gezginler.net/i/2865/.../

http://indir.gezginler.net/i/2865/.../

http://indir.gezginler.net/i/2865/.../

http://dw.uptodown.com/dwn/oaRdDsNF_eK7Wf7jcu_fc2QKpqRE6FDHMLlr7u2sfJwmPRgRTWq-XIUwOcDhzlsFIYnQ0wLyhLKZEnv23yACRrnj7-r3JpPpSwEWUy7uuSBXkWYu-0tqrfugnRKS5NuJ/QJugY1FoyndYPhPA0eRvXvYkv_jEG2QV1EZtQUo7gaPIJ9XViNR-KOhxbTGGQg7cj2Tyiz4pwyKtxwNBvFPQMy6DBapMrJCkJvY0vzFFcjY-DsxUV05zvh_OXdwkcrpJ/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

https://secure-appldnld.apple.com/iTunes11/.../iTunesSetup.exe

http://dw.uptodown.com/dwn/LV1SIe8ei3UPI71MLQK-jv3hAAaLVemwSdbvxCcvjXP_65ah0-4ynsfldiNuIoysWW_DIqQRApkZ6ZLULEVEfuHjAA7KuhjsktiG3LnigPc1dWBkJStp5BL2jFh9UOLz/.../

http://lb.cdn.m6web.fr/d/c/a/893007d9ad503c72716ad127d3457b09/56fc8ba7/soft/.../itunes_12-3-2_fr_11140_32.exe

http://indir.gezginler.net/i/2865/.../

Latest 30 of 699 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.