» iTunesSetup.exe
Overview
Analysis
File Details
Downloads (10)

iTunesSetup.exe

iTunes

Apple Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from www.techspot.com and multiple other hosts.

File name:

iTunesSetup.exe

Publisher:

Apple Inc. (signed and verified)

Product:

iTunes

Description:

iTunes Installer

Version:

11.1.2.32

MD5:

a6ffc7279fb160002a3a6feec45b2838

SHA-1:

46553dd4cc27cadc903d83b14c56ff0b4324cad8

SHA-256:

1acf27c5cbbd96236e43e4c02c9eb501888f65ffe6d0d4c941b97d5f568a53b4

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 4:09:07 PM UTC (today)

File size:

94.1 MB (98,660,176 bytes)

Product version:

11.1.2.32

Original file name:

iTunesSetup.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\itunessetup.exe

Digital Signature

Signed by:

Apple Inc.

Authority:

VeriSign, Inc.

Valid from:

5/24/2013 9:00:00 AM

Valid to:

7/24/2015 8:59:59 AM

Subject:

CN=Apple Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Apple Inc., L=Cupertino, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

47DE2F9FBF7A1D4191F45773FA113E1D

File PE Metadata

Compilation timestamp:

10/24/2013 10:30:07 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

1572864:+JRp+sl+YsoWaRMwRyMh8pTQWym0cvOyJJgh7N29vhDct3P4QjzhZbBGTnmI5H:Gksl1s1YKTQWymR2yc7YAt7rIqIN

Entry address:

0xBA63

Entry point:

E8, F4, 55, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, A3, 14, 8B, 41, 00, 5D, C3, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A1, 00, 6C, 41, 00, 33, C5, 89, 45, FC, 83, A5, D8, FC, FF, FF, 00, 53, 6A, 4C, 8D, 85, DC, FC, FF, FF, 6A, 00, 50, E8, E7, D1, FF, FF, 8D, 85, D8, FC, FF, FF, 89, 85, 28, FD, FF, FF, 8D, 85, 30, FD, FF, FF, 83, C4, 0C, 89, 85, 2C, FD, FF, FF, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF, FF, 89, 9D, D4, FD, FF, FF, 89, B5, D0, FD, FF, FF, 89... 
[+]

Entropy:

7.9998 (probably packed)

Code size:

71.5 KB (73,216 bytes)

The file iTunesSetup.exe has been seen being distributed by the following 10 URLs.

http://www.techspot.com/downloads.php?action=download_now&id=70&evp=2b285ccf527ea7158b2af859b697f93a&file=1

https://secure-appldnld.apple.com/itunes12/.../iTunesSetup.exe

http://appldnld.apple.com/iTunes10/.../iTunesSetup.exe

http://download.itnt.netdna-cdn.com/40/390202/.../iTunesSetup.exe

http://itunes.soft32.com/get/file/id/.../

http://appldnld.apple.com/iTunes11/.../iTunesSetup.exe

https://secure-appldnld.apple.com/iTunes11/.../iTunesSetup.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.