home

c0urqlkp.exe

iTunes

Apple Inc.

Publisher:
Apple Inc.  (signed and verified)

Product:
iTunes

Description:
iTunes Installer

Version:
12.1.1.4

MD5:
b5b610f48f7fc5430f407e6b316255b1

SHA-1:
502778a89ce480f564b9d0ebfac626326fce69d0

SHA-256:
286b81b97b89db468ae619c5b98d326b6c346dd12169fbd750b3097864c3a81e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 7:49:34 AM UTC  (today)

File size:
103.8 MB (108,800,816 bytes)

Product version:
12.1.1.4

Copyright:
© Apple Inc. All Rights Reserved.

Original file name:
iTunesSetup.exe

Language:
English (United States)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\c0urqlkp.exe.part

Digital Signature
Signed by:
Apple Inc.

Authority:
VeriSign, Inc.

Valid from:
5/24/2013 2:00:00 AM

Valid to:
7/24/2015 1:59:59 AM

Subject:
CN=Apple Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Apple Inc., L=Cupertino, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
47DE2F9FBF7A1D4191F45773FA113E1D

File PE Metadata
Compilation timestamp:
2/13/2015 5:36:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3145728:877YfxmKLDGrAvXyWT6b0Ot8hFTe0TVAnc/b:8oxlDM86InFT9TVaAb

Entry address:
0xBA63

Entry point:
E8, F4, 55, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, A3, 14, 8B, 41, 00, 5D, C3, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A1, 00, 6C, 41, 00, 33, C5, 89, 45, FC, 83, A5, D8, FC, FF, FF, 00, 53, 6A, 4C, 8D, 85, DC, FC, FF, FF, 6A, 00, 50, E8, E7, D1, FF, FF, 8D, 85, D8, FC, FF, FF, 89, 85, 28, FD, FF, FF, 8D, 85, 30, FD, FF, FF, 83, C4, 0C, 89, 85, 2C, FD, FF, FF, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF, FF, 89, 9D, D4, FD, FF, FF, 89, B5, D0, FD, FF, FF, 89...
 
[+]

Code size:
71.5 KB (73,216 bytes)

The file c0urqlkp.exe has been seen being distributed by the following 50 URLs.

http://www.megadlcenter.com/4SRTMfn9T Dcq7sIkcx4H hVnLA1qOB_mxitRlByLyqKv8gYP1 ustCXox1OASmqvPW4IhC8dbJ AryNM9sOlCw83DDWfG20KWuYhyahb5hWTZiqtKTFNYjqt39L9Tq cxp94c2aoO870I1VCzte7Z0LWCpUdG8a2WHmfa5DiLh2Sx5buexl3peHQbC6CXLWvqvGc1sn4MM _CoOq11gZuEZkxPXBQ==-G0gAAARqbjHBa8oa6gWKcwKb4JADhy8NKKAA2wIPWSmKPdCM2li_Ack5OEBi42I5nEX1IRWo8hRb3EX1dT4=

http://itunes.sv.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6aQnp2fl5c=

https://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKGPnqGikpo=

http://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6eLo6WkmJo=

https://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKONpp6jlpc=

http://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fmKWMpqCil5o=

http://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm5-HoqKjkZg=

https://itunes.he.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKWKn6OnmZ0=

http://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fmaWIo6WklJY=

http://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6SPo6Sfmpo=

http://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6CMo6Chlpc=

http://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fl6OPn6CikZQ=

https://itunes.fi.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKOQn6Ohk5w=

http://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6eJpKSlk5k=

http://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6aIop2hmZk=

http://itunes.ru.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fmKCIpaSnl5c=

https://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKOPoqCmk5w=

http://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6WLoaGlkpc=

http://itunes.he.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6KOpJ-fkpo=

http://itunes.ru.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKCOo52lk50=

http://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fmKaNn5yflZY=

https://onedrive.live.com/download.aspx?cid=6A7E9DEC98ABC6F9&resid=6A7E9DEC98ABC6F9!954&canary=2UMy8TOnIQxtY8QwzuMsReAi4GMTgFBeBXpURjmbSHo=5

http://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fl6SKop2jkZo=

https://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKOKpqGfl5w=

https://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKKQn6KlmJg=

http://www.currentupdateconcepts.com/_9TlW48EW1V9y0e2M 9OTk3Rwe_UxWI67Oli_x9MDLiWXZRlZnK15lZYsK5aN_mCsaMTwYYBo1FzorEbs6Ac1e22wFCoydn4XSlvm6_1vh12MoiMDBhT7PN6Y2LU1aU2SlQbBez9 x95ychrUO2iRuzSHT_TPO6TI4nH5FV97Ndus3cPw71AFvyUFvCEqc6m6c6EDPyW-G0gAAARqbjHBa8oa6gWKcwKb4JADhy8NKKAA2wIPWSmKPdCM2li_Ack5OEBi42I5nEX1IRWo8hRb3EX1dT4=

https://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKWNop-nmJc=

http://filehippo.com/download/file/.../

https://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKOIo5-mk5Q=

http://itunes.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6ONpKChmJQ=

Latest 30 of 2,787 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.