home

iCloudSetup.exe

iCloud

Apple Inc.

This is a setup and installation application. The file has been seen being downloaded from www.ranchsendgift.com and multiple other hosts.
Publisher:
Apple Inc.  (signed and verified)

Product:
iCloud

Description:
iCloud Installer

Version:
5.1.0.34

MD5:
7d54d51615f50430009b9532ccaf4d97

SHA-1:
86c42a10472f67b2228e307911e29f8bf2624e20

SHA-256:
dc373c76eb22b3c7f0be65e3b6c530cfe3163343f02007ebfb672623335af85c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 7:36:10 AM UTC  (today)

File size:
119.4 MB (125,168,408 bytes)

Product version:
5.1.0.34

Copyright:
© 2012 Apple Inc. All Rights Reserved.

Original file name:
iCloudSetup.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\icloudsetup.exe

Digital Signature
Signed by:
Apple Inc.

Authority:
VeriSign, Inc.

Valid from:
7/28/2015 8:00:00 PM

Valid to:
8/27/2017 7:59:59 PM

Subject:
CN=Apple Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Apple Inc., L=Cupertino, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2B20EB3380792AB011F662C064FDB473

File PE Metadata
Compilation timestamp:
12/1/2015 7:01:50 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3145728:AYjKMBS233+qclA/YMVn6j4qlna0+33lYTDxlfhC8dQM+5dNu:Auf33DN6Uq00w3kl68

Entry address:
0xBA63

Entry point:
E8, F4, 55, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, A3, 14, 8B, 41, 00, 5D, C3, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A1, 00, 6C, 41, 00, 33, C5, 89, 45, FC, 83, A5, D8, FC, FF, FF, 00, 53, 6A, 4C, 8D, 85, DC, FC, FF, FF, 6A, 00, 50, E8, E7, D1, FF, FF, 8D, 85, D8, FC, FF, FF, 89, 85, 28, FD, FF, FF, 8D, 85, 30, FD, FF, FF, 83, C4, 0C, 89, 85, 2C, FD, FF, FF, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF, FF, 89, 9D, D4, FD, FF, FF, 89, B5, D0, FD, FF, FF, 89...
 
[+]

Entropy:
7.9999  (probably packed)

Code size:
71.5 KB (73,216 bytes)

The file iCloudSetup.exe has been seen being distributed by the following 50 URLs.

http://www.ranchsendgift.com/SBE6BE9vn21AimgaNJCJ_O 8aAxxdzm5VQ2qOHdZ6f7fqWWWyczsFq67rHB4O8PgYWGy 5MZDx1sMCIazemY3d3MI68nCUVIJHEilYcK3lfVec0mUpnQSCQS6VzR q9 8BPh7JBx39ygU 1Lcq8XEG5iZGNWAe mWPexS10I8HLIF3sPL5eUtwAyGvFkmy5x5x mzngyI_ylzqFQFQHqlkbCzq0mDg==-G24AAGRwXkyTSrjQAINDDhy QskCwcCDjbFzBUH6aY0NCjis7Qb10BqsosqcIEsRZgRwqqmM SoIxQpUtGjrmmNgikoAQhoBtDYGlES2rRCStbVBw6e4vpr72WHzNw==

http://indir.gezginler.net/i/18179/.../

http://www.programosy.pl/.../pobierz,icloud-control-panel,2.html

http://download.info.apple.com/Mac_OS_X/.../iCloudSetup.exe

http://files.instaluj.cz/dwl/ec177fc26e0e004196fc0e6e93796664/utility/zalohovani/icloud/.../icloudsetup.exe

http://indir.gezginler.net/i/18179/.../

http://indir.gezginler.net/i/18179/.../

http://www.ranchsendgift.com/_aM4xxynmnLqTe3bIy81VXxuf7g4xVKFDEoPm3AOLxMeU2gYon1uiOu9GJUbqvNYWjvkr95h3zwIh vvGihWddnGLDIMCEMwm2L_UZDHY_lcjtFlhFkdLbkq1ALeBfaPESYc5XecM8ncrQcSfEJWvsk0EuZVdh6N u6iJ6YjT_ONYo1044 OfLIzrt7ilQht2Um ghsy Qy475lJwVd6 xJPUwJUXg==-G24AAGRwXkyTSrjQAINDDhy QskCwcCDjbFzBUH6aY0NCjis7Qb10BqsosqcIEsRZgRwqqmM SoIxQpUtGjrmmNgikoAQhoBtDYGlES2rRCStbVBw6e4vpr72WHzNw==

http://w.x.baidu.com/alading/.../10352

http://www.towerbitscenter.com/Sf2lxJfQxkZSng9PTf9ypEauVPy1KfJd5H5fnXxbj1FIwjHSnRcD8uFvgC4PK5uaQBlnk_3lXOf6q HW1aU7Zabne68jxyyGTCopggh6mQjFGISlyBtA0nb7FODAR6XrasXiAzuTl h_H2nd kLs6r_nAPzSd9ybl7ThVJ6iA2a1gTlRLPurUZ_slaQiKf 0GGshfj0Z1FbbqAen94wtI B_jmmdig==-G24AAGRwXkyTSrjQAINDDhy QskCwcCDjbFzBUH6aY0NCjis7Qb10BqsosqcIEsRZgRwqqmM SoIxQpUtGjrmmNgikoAQhoBtDYGlES2rRCStbVBw6e4vpr72WHzNw==

http://indir.gezginler.net/i/18179/.../

http://download.info.apple.com/Mac_OS_X/.../iCloudSetup.exe

http://www.ranchsendgift.com/hQVYjjG7UV0AsjCFiHNjzfLiLsLwRN27r3MHpn8MxWiRvnGFV86 pDASW7RRc6o4moyRC1th17FpICOahKz85AmpFBiCgKVwrgKC bDj3Ab43IpNkTcn27YoZjFTaJP9fuC3EdzzaSZif3cZTB5FTnIZETKs0exLWPfD0BD9FgfAYBvk8RaMaLGWQBLlff2BHfzP00dZTWGLdAKu42WzOaGdVT7ISw==-G24AAGRwXkyTSrjQAINDDhy QskCwcCDjbFzBUH6aY0NCjis7Qb10BqsosqcIEsRZgRwqqmM SoIxQpUtGjrmmNgikoAQhoBtDYGlES2rRCStbVBw6e4vpr72WHzNw==

http://indir.gezginler.net/i/18179/.../

http://indir.gezginler.net/i/18179/.../

http://indir.gezginler.net/i/18179/.../

http://www.ranchsendgift.com/vPIMkknfTXuISaWjG0BGwa4rA wMbH FLGJkEMaEkqP RoZOvGrLO3twwY4YJ7O8wuuCNLvYtXabSBKIZI0V6e2o8n7HX6hHV8TSPgr64V3H_Tf7WB6YZ9aPAUi8E3QaMr7Ncg8KDHuLv8JdWIwUfjDoU p_WD8Hkq0ySxvdiMfGb2AhDxN90eIXmtWH7ZPaSwsjPebzxQZkF8Ek0ybzh1JDNo9XCg==-G24AAGRwXkyTSrjQAINDDhy QskCwcCDjbFzBUH6aY0NCjis7Qb10BqsosqcIEsRZgRwqqmM SoIxQpUtGjrmmNgikoAQhoBtDYGlES2rRCStbVBw6e4vpr72WHzNw==

http://indir.gezginler.net/i/18179/.../

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=1c8dc9ab7b028d534e2c5a63c77738bc&url=http://supportdownload.apple.com/download.info.apple.com/Apple_Support_Area/Apple_Software_Updates/Mac_OS_X/downloads/031-42826-20151207-c2afdd40-9ac5-11e5-8899-b16ff5563fd9/icloudsetup.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_50322773.html?t=1457291988&v=3600&s=2141d322f8fa901fc2ca3ced4272a8e8

http://chip.digidip.net/visit?url=http://api.smartredirect.de/api_v2/ClickGate.php?p=Z5CZZT9icW&k=1c8dc9ab7b028d534e2c5a63c77738bc&url=http://supportdownload.apple.com/download.info.apple.com/Apple_Support_Area/Apple_Software_Updates/Mac_OS_X/downloads/031-42826-20151207-c2afdd40-9ac5-11e5-8899-b16ff5563fd9/icloudsetup.exe&s=buDL-dl-extDL&ppref=http://www.chip.de/.../c1_downloads_auswahl_50322773.html?t=1458463304&v=3600&s=0f502cbcd4e53e26ad2f418a1af4235d

http://www.ranchsendgift.com/AO7 vHvgI6gQo3andBwPiW2O_Hn6yjbjbdbbnpWEKa8WRhKi0INdtVzCPQx_r9USP3KdQS07OSj8WyM_wit tzCxAOgIv5mAWCLqRXQ9l0SkmeXgnpifPePLMYGFewBkrJliK4EJwJnj01vgkgWcwOa_TCK27UfvP6boUBfhpNWqkKqmIBGAFrTeUNYgGcJ9VM QRedG7LaVvufdcHKTVLt2VceIeA==-G24AAGRwXkyTSrjQAINDDhy QskCwcCDjbFzBUH6aY0NCjis7Qb10BqsosqcIEsRZgRwqqmM SoIxQpUtGjrmmNgikoAQhoBtDYGlES2rRCStbVBw6e4vpr72WHzNw==

http://www.ranchsendgift.com/vTsz1uUTDVjj1LrVVP3vI_MQoqEuBmfvVvciVSztU1UKnwAq9qMkboVmSROxufeWIPwL1 WBns0xBvTxvkRak3eu2tdChFeGhjc_RgdD6oyiyaEjAzNgZZ0YsgI6r9siuj3NmBhOS0bMsfLz2k2w2DGnhprEySTZfNjBImU4PiJImcF1pSgoNYkSt55U6X8N0UiOVbqrxmQatwyYfscDvEWEe_vyFQ==-G24AAGRwXkyTSrjQAINDDhy QskCwcCDjbFzBUH6aY0NCjis7Qb10BqsosqcIEsRZgRwqqmM SoIxQpUtGjrmmNgikoAQhoBtDYGlES2rRCStbVBw6e4vpr72WHzNw==

http://www.ranchsendgift.com/eUa5 mlulfWjKsHh_zaoVDMVgDzw99J4vY2J39Gz4zVaHr5JuCNQMtJpNSndcrScK0 M79QQyAVlOomxfSIY_tkQwtcGEyrU71sMT Zj76kNgb6d5M5Mhu064b23BLCpAEuKG3XKXItdceI1NqLILrkw6mo9Q4kVCWW7Ji4eTXLN6DIvj1SSH3qVh4FP3m3yv0g39eV_IuCHIEgZtzN8B urG0Cc6g==-G24AAGRwXkyTSrjQAINDDhy QskCwcCDjbFzBUH6aY0NCjis7Qb10BqsosqcIEsRZgRwqqmM SoIxQpUtGjrmmNgikoAQhoBtDYGlES2rRCStbVBw6e4vpr72WHzNw==

http://www.ranchsendgift.com/EsKv1fIH75dXYjbslmg1yV JqekgHAaQXDUxX9RHfN6OlSEMjXpjMXX86Gha8B fMG1iPwYkn5N2caV1BRS2MNGXndyubn8EPckdmkilRiKVBzwR7mKj4YXHh2ikIqOcZ2_mWMVsGJuG_Qa4ep3NQk3y6IFn8CE3dgZ4Af37x1DkleIL6D1dkPWc1a9ImlNbZLTVNYQL7eKvT3lNAvdNmjBpIOo65g==-G24AAGRwXkyTSrjQAINDDhy QskCwcCDjbFzBUH6aY0NCjis7Qb10BqsosqcIEsRZgRwqqmM SoIxQpUtGjrmmNgikoAQhoBtDYGlES2rRCStbVBw6e4vpr72WHzNw==

http://download.info.apple.com/Mac_OS_X/.../iCloudSetup.exe

http://c236.y8top.net/2107tmp/cf/soft/2016/4/ba/.../icloud_51.exe

http://f51.softwaretop.net/2107tmp/cf/soft/2016/4/ba/.../icloud_51.exe

http://indir.gezginler.net/i/18179/.../

https://support.apple.com/downloads/DL1455/.../icloudsetup.exe

http://indir.gezginler.net/i/18179/.../

Latest 30 of 63 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.