» iTunesSetup.exe
Overview
Analysis
File Details
Programs (1)
Downloads (40)

iTunesSetup.exe

iTunes

Apple Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from s7483.chomikuj.pl and multiple other hosts.

File name:

iTunesSetup.exe

Publisher:

Apple Inc. (signed and verified)

Product:

iTunes

Description:

iTunes Installer

Version:

9.0.0.70

MD5:

76bf1d5a86344e2ab10e8f6fd4e2b086

SHA-1:

68c84dd8d910ce6cc1508f41cb86d20de839f2e3

SHA-256:

23daf845ed7f7ff9cf3407d9a16ebd56e40f444b6128d0a1f8900480dc444020

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 7:21:02 AM UTC (today)

File size:

88.8 MB (93,107,496 bytes)

Product version:

9.0.0.70

Original file name:

iTunesSetup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\itunessetup.exe

Digital Signature

Signed by:

Apple Inc.

Authority:

VeriSign, Inc.

Valid from:

5/17/2009 7:00:00 PM

Valid to:

6/26/2011 6:59:59 PM

Subject:

CN=Apple Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Apple Inc., L=Cupertino, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

1FBEDB2A9B36C86F3CC85A249BFBD2EC

File PE Metadata

Compilation timestamp:

9/8/2009 11:44:37 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

1572864:7mZboG8w1BctCbB1oRRKJPSQiw3rKsQPDamBc64Brn9igEax6wVSK:7aboG8MGCLlJKQiumRWX9VEaxd9

Entry address:

0xAEE2

Entry point:

E8, A7, 53, 00, 00, E9, 16, FE, FF, FF, 8B, 44, 24, 04, A3, 20, 82, 41, 00, C3, 55, 8D, AC, 24, 58, FD, FF, FF, 81, EC, 28, 03, 00, 00, A1, 00, 60, 41, 00, 33, C5, 89, 85, A4, 02, 00, 00, 56, 89, 85, 88, 00, 00, 00, 89, 8D, 84, 00, 00, 00, 89, 95, 80, 00, 00, 00, 89, 5D, 7C, 89, 75, 78, 89, 7D, 74, 66, 8C, 95, A0, 00, 00, 00, 66, 8C, 8D, 94, 00, 00, 00, 66, 8C, 5D, 70, 66, 8C, 45, 6C, 66, 8C, 65, 68, 66, 8C, 6D, 64, 9C, 8F, 85, 98, 00, 00, 00, 8B, B5, AC, 02, 00, 00, 8D, 85, AC, 02, 00, 00, 89, 85, 9C, 00... 
[+]

Entropy:

7.9997 (probably packed)

Code size:

72 KB (73,728 bytes)

The file iTunesSetup.exe has been discovered within the following program.

City Bus Simulator 2010 New York by Catalog Games, Inc.

gameway.ru/catalog2

About 3% of users remove it

The file iTunesSetup.exe has been seen being distributed by the following 40 URLs.

http://s7483.chomikuj.pl/File.aspx?e=bEBFce_sjhIef9MhSuXAgModjLDYX0-O8KC1rK9ADBBOQvj3HpLsQOjsvo4J6wYcSTuVZz3XIUDrxQlNTTF5oHX754GaiBb-YJLNglnQSD8qFNsImgJkQVmotecidtpq4-1bXWvolfkn0oSc6nwksQ&pv=2

http://filehippo.com/download/file/.../

http://appldnld.apple.com/iTunes9/.../iTunesSetup.exe

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ3ODg4NzUwOTtzOjI6ImlkIjtpOjM2Mjk7czo0OiJmaWxlIjtzOjE2OiJpVHVuZXNTZXR1cDkuZXhlIjtzOjM6InVybCI7czo0NDoiaHR0cDovL3d3dy5vbGR2ZXJzaW9uLmNvbS93aW5kb3dzL2l0dW5lcy05LTAiO3M6NDoicGFzcyI7czozMjoiZDViODQ3N2FjNzU0ODhhMGJiY2E2MGNjMTczNGEzNTUiO30=

http://www.filehorse.com/download/file/.../

http://filehippo.com/es/download/file/.../

http://s7483.chomikuj.pl/File.aspx?e=bEBFce_sjhIef9MhSuXAgModjLDYX0-O8KC1rK9ADBCWBGcHo0E6PrnTjDjdwTYpBEHEIOw93xIin0nh6yDq414CvdQnOhzUs9deDUWBL-8iH0kSryaJP9d_lUeMcdxxGAQB8ep3SDLvwsWMhGVfbw&pv=2

http://download.oldapps.com/.../iTunesSetup9.exe

http://filehippo.com/download/file/.../

http://s7483.chomikuj.pl/File.aspx?e=bEBFce_sjhIef9MhSuXAgModjLDYX0-O8KC1rK9ADBAlV0HDvlVYJPPcfe8BvC5cfvUWZ4VH0ksyvtEqmhWPlRnggCr_DRtWBtqIQzgEeWmq2pBuUha3BPDxphOysSFIuAQV83H-S-fRm0Rb-djBkQ&pv=2

http://filehippo.com/es/download/file/.../

https://secure-appldnld.apple.com/itunes12/.../iTunesSetup.exe

http://s7483.chomikuj.pl/File.aspx?e=bEBFce_sjhIef9MhSuXAgModjLDYX0-O8KC1rK9ADBDXlNDLo1PybltDBKBsAp9ST_4XR-yhk002nrSvoL0X-AEDGfnu_X1lmcZDZXgPBQtlIn7PwkEnr9nFRN_bryhnwQv6VkiBnkJE1O7Ihuj8NQ&pv=2

http://filehippo.com/es/download/file/.../

http://filehippo.com/fr/download/file/.../

http://filehippo.com/download/file/.../

http://s7483.chomikuj.pl/File.aspx?e=bEBFce_sjhIef9MhSuXAgModjLDYX0-O8KC1rK9ADBCl1ZrzmXbR1F93L5FSGU-Tv6JgJd3PQ6Pm4bTDxg_hJLggqjMVy2lY112DFjmQXX22Dx0QoOIhTkcxDcP4kf2wyS95VgJieZPvWVc436XPYw&pv=2

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ2NjgzMjYzMztzOjI6ImlkIjtpOjM2Mjk7czo0OiJmaWxlIjtzOjE2OiJpVHVuZXNTZXR1cDkuZXhlIjtzOjM6InVybCI7czo0NDoiaHR0cDovL3d3dy5vbGR2ZXJzaW9uLmNvbS93aW5kb3dzL2l0dW5lcy05LTAiO3M6NDoicGFzcyI7czozMjoiZDZiNTkwMjFiNDdhMDJjMWE5YmJhNjEwY2EwZDU0NTkiO30=

http://filehippo.com/download/file/.../

http://filehippo.com/es/download/file/.../

http://s7483.chomikuj.pl/File.aspx?e=bEBFce_sjhIef9MhSuXAgModjLDYX0-O8KC1rK9ADBBs8iMIjHtKcslqI-G_g1_FQYleB4U2KpkCHRRese848buTcbCovZmYpEaiS5z5NJr7DdG9JDs5wEK9miNC-ELPeXy1CaFnEeCjYS4Y4xeqOQ&pv=2

http://s7483.chomikuj.pl/File.aspx?e=bEBFce_sjhIef9MhSuXAgModjLDYX0-O8KC1rK9ADBCfH4DLnrFv2KHozLd5tqZk3xYw_F4TOAaVaSraaVlb6VHWLFxYbDxH0BaxlZ_RadzX2iUxlw8YdWATcVjrHU8TEkYG_MGOqxfG41pHDl3qVw&pv=2

http://filehippo.com/download/file/.../

http://filehippo.com/es/download/file/.../

Latest 30 of 40 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.