home

iTunesSetup.exe

iTunes

Apple Inc.

This is a setup and installation application. The file has been seen being downloaded from www.ranchsignbundle.com and multiple other hosts.
Publisher:
Apple Inc.  (signed and verified)

Product:
iTunes

Description:
iTunes Installer

Version:
12.1.0.71

MD5:
e735335eb4e61862d4d390153cf8e692

SHA-1:
f0c4609affadae5083c7595821d82207734d4e41

SHA-256:
8dfde196af152235f8f5e57cf32eb537981260a975722bddc85a713f83481b22

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/10/2024 9:59:51 AM UTC  (today)

File size:
103.7 MB (108,785,968 bytes)

Product version:
12.1.0.71

Copyright:
© Apple Inc. All Rights Reserved.

Original file name:
iTunesSetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\itunessetup.exe

Digital Signature
Signed by:
Apple Inc.

Authority:
VeriSign, Inc.

Valid from:
5/23/2013 7:00:00 PM

Valid to:
7/23/2015 6:59:59 PM

Subject:
CN=Apple Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Apple Inc., L=Cupertino, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
47DE2F9FBF7A1D4191F45773FA113E1D

File PE Metadata
Compilation timestamp:
1/27/2015 6:51:35 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3145728:JTUnbad8Bxs9l5QvH3uka4urQPZMvk7E7nD:unbPsH5seH4asMs7E3

Entry address:
0xBA63

Entry point:
E8, F4, 55, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, A3, 14, 8B, 41, 00, 5D, C3, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A1, 00, 6C, 41, 00, 33, C5, 89, 45, FC, 83, A5, D8, FC, FF, FF, 00, 53, 6A, 4C, 8D, 85, DC, FC, FF, FF, 6A, 00, 50, E8, E7, D1, FF, FF, 8D, 85, D8, FC, FF, FF, 89, 85, 28, FD, FF, FF, 8D, 85, 30, FD, FF, FF, 83, C4, 0C, 89, 85, 2C, FD, FF, FF, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF, FF, 89, 9D, D4, FD, FF, FF, 89, B5, D0, FD, FF, FF, 89...
 
[+]

Entropy:
7.9998  (probably packed)

Code size:
71.5 KB (73,216 bytes)

The file iTunesSetup.exe has been seen being distributed by the following 50 URLs.

http://www.ranchsignbundle.com/Wg_sj6HIqowVDYxNmH86DdyvCaUvW9P7GfwC6ixF3SouaXpQZkNFoKylES7xUVFI6raqC 3BWjOQCc0SRcf1sCAS1oxgl0CsuyM99lNT4adGFKjSiHGVXsBkJdSez1UuyyZkVbvau_NM CfoKWQxq50xXHEtIaF7SPcz00ewpznmOsPiXPY=-Ow==

http://www.ranchsignbundle.com/sMntnFFcY29niQLf9l8GgJcXiNzMKb6ny7eQqZzt3si5ar 6uU5LFVXaH1Nb5mfgFH1uNm5TAhyP3R41Z5hgUXXKoDFU3VUReD_HvqGLZESRcBRta5EluQZ7oivlPuRzUflWEtLsTfp4F15iXbpMvq9mSDLx6st_mu kHmu9N8DKr8KReuo=-Ow==

http://www.vaultflashapplication.com/ie KO275FnBk92pHc5iI74kj107ti1vrUdScNiybWmbUwKwW0Am3bdRyFw1 t7LvRBQ6LE77GXmjM8VG5kFtPkmN0y7pm3TFZf8vZHDcA9mM9L_GFdnbFDvp6WVixk91OutZAqt voG0HRbT8f54oVqlW_eyQox74CiShizhEvKWi2qUlGiiGSYjtqnDHqJId_87M06qM6MuYRjsnXubaBu8mr1mdLNPZOhUWnRid8zV8a35h TQk1BGAKWT6ZRd1YuaL6Ah658enAjWbcX6YCkX3eUN88hXOhnbxlv4bxwbrzrlVDvqHyrOaJfujQmQ0yhK_9iPr8SgC92GF 4O2A8f9_ugtdCvdZW3YknXuFmxjIFWi1E2fTcX9FMnl9oDWnmmz_Rl0OMAM vcpA8NgLAgcG7f_yl2vYKaCMhAHVEXX2UI_YOS2Nz85L4F9Ii55 TeTZT02200FVFKHQunyTi_ tr6xr 2S lS0sTzoCFmL_xiJ0hJ6GoEJwjKrQX7T2td4ITTF_xC1TvZJ0 EXDVTI5zDafcVvE_MiW5Yq96Oi8ZctYVazbHpD2813EGm52_pPTuFX9zX37Vwj9hP1KYS8IG0AyVeDAOIeaRbPsZ4GbJwM00nxiE7yI15T2NT5H4H9OeM_kL5EktX1aL3KQfUxDNN_5J9M_9uSMn5dRm6yUmnudbYeaSW9a2U60i75n0oRA3MAqh36BPlDfayvn1jhLaXXNxFoc6v61hXAA14QRyZrHnmvffg4uxXliZBLDgHI2 5fo9bEw9JgBuqp NNSdz7CtW0hy7lzXn498ypu5H08Hk6oYqwqiZboMwirHFEQwZbwnDA5ZbcyHOzJTTXQRZRIOhmAKp2MzW3 PhmzE06KZOhWWQ9Bt7TvVSvZPxI4jE3cK0Uulv14UCI4V17ZkOziw==-GxUAAMRjbF7DPAblGlKTTkYpbCur9TVXEA

http://www.ranchsignbundle.com/a_o94V6JtlX9OBCPIhu0SooHOTjL84X_qZtAPebA5EhpkxJ7GO 0Seh8YhPEOiY2FsowdcwDfUYzwwLg xO DRNcFBBbZ3_AHy9F7lONLPeH6dpj N9FYx8QHN92wqWdnCmr8HV1JnhKdf90fHGL9eAWNV0d4gvNJqvT7cx4y8qRXY1xZFw=-Ow==

http://www.vaultflashapplication.com/wirankpopSyQY0ai8Ev_7cR4CPvEmhRODS8EV3iiR1JMgVehedNbZEKvDHnd1zt2p ZBMPQZ1xn0MzItrM J56mrV6NBljgQ3LWj_pMyn5DKFQlHcOwjEAp6GWka5rfbqQxfy8_g1V XTQ2UFviUvpOW zhA7iAsGnCQN87aC6TrGtY8Blv7cSf7GvBJaWn6SIvrlKLA-Ow==

http://www.vaultflashapplication.com/NJT9EnqW88 bt4UDqwVvrICYwLUQHIGd4AfS40l3k5bCuEPHlULqGe9Oo1DApvPevHacbu67aRRlopX2X1u9xO57PF rfmcKc43sAOnsLilWutf4rAyhdpbXNApnKNTU7OtxkpacOAkRKJ5tOTpYOTeF9N37_9uZApXhxech1Gi1mw97Ob4sjT8lVl5ukpxwt9H9qam7-Ow==

http://www.vaultflashapplication.com/ZcaQZ2GG4WDHZ4JDxm97hCkcKjA7VPPNH ygL9UqutCekX6j4XL4lS0yfn5Qje0w3MyByOZuYnrJJ993sCY9m8fNAA 6aqVeNmUNtsVyyvvcjQeRYiEXze_eP__x6Mfuv6i8MVPgQFvjIFy3cqfaxKVorYKvh2ho5nRasHScyCrLz9XBo9_W78oRKoZkO6D4kGz sseI-Ow==

http://www.vaultflashapplication.com/dc7bQU0fSVya8XfyvoTwloUuRyobM5gH6Dn42VjNV01boqeDl_V9bm5AmMqddocpJqUZj9KTRli3fe33vIgA9c6CFLNThn5kckHVLT WFGAEf0ocSq1aulm2yt1Zc4FUcCkIVfsCk6c2jmsdOTMi36461OrZxLz5VPV7VsOYmsnPdwaS3ciuTvatBIwakydVRCTpX0qL-Ow==

http://www.download3k.de/DownloadLink2-iTunes.html

http://www.ranchsignbundle.com/8ySFgxdZs1KCE2tjnzy8EeDsBenVG35leK7lg6wGGFeiPD72FwKQWCMEta7yPUmYmzhWwSWepeEf1UdTgosjaU4S9NwuusQ36aM0MJRwOUiBopi OiYJPsRZ4pKjz73ns3rVtQgnZjWgh9yXIfRaGqk7ATV1dQ29b8Lpjc02Cd57u5aFbQM=-Ow==

http://f51.x8top.net/2107tmp/cf/soft/2015/2/ba/.../itunes_121071.exe

http://www.vaultflashapplication.com/3UsjrLWfTDPNYa4bEfH9QdwHzTpwPWvq7E74KyBl3Cog7Lq1APEIHZ1UeK_BBx6h_jlf6aMemh0ge1yZsRRZ6aMUuc5BwTN OnbE_kxYBNR1sCvQi1pXuieiBeuT40r1Z7ytW7fuRXB7mh7f3 5Goc0Bi7_msGf808hJmyqtChK0Lx9X5IQtiOJXVLdpFzO0HAzreQAv-Ow==

http://www.ranchsignbundle.com/HKLVd94sUgWPXrNgXF2_nEUjH6kX7zOjjUVT5flxSTRCtchglGjJf5lvkpT2n09YiGFxyyld4XgHev9mUb16mBvVcsOCbBbFqOgqm8QY Ka2oDmGrIVAP7ci6rEK jgcb1DbTVSlsistMKaPq8l0_fUN8qeoj8XjgpkJ5mLrDRHbOf3SYRY=-Ow==

http://www.ranchsignbundle.com/c?x=i6zjRtsZsuBxRC2Z52 r3T8/.../404

http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/.../iTunesSetup.exe

http://d.myfreedownloadsfiles.com//c?x=9zNp5/QwO1o4rtb12aQ0qSDvFIhfowmYtExvw 3kuNM=&c=1kbgAl9s4xEgF8uydKfXwgEq5rIx7Rpgt6IhV/i LZfWYDTxJlAEB23JSduluQOe1yIwEQFfZNbo9A9rMoGe7w==&fallback_url=https://secure-appldnld.apple.com/itunes12/.../itunessetup.exe

http://www.ranchsignbundle.com/A_gBQaiG_XQt3HNTSNJDtMjuIzqGbtzGGBvcBYF3fjNa8fYUZk_p rbLJ08CEUC07anS9KNqicQAPBNH GjjkGXYm5TxQAggQFuh3tlE1osCdEjMOWxkwzEKUQ2URuBUqpFBnFXS2eyIaDwIVGGqMOp6ja7Sw3jIwyiMqaXBUr2a7MHbIas=-Ow==

http://www.ranchsignbundle.com/Sgkv CtXukbP53AQxTsJ71i1am0Ekhui_xa5xOOmnuaieme5jy7KRjmRk0GElEgEptzhLsFRmaqaN36hZnXcE4cFXD3Jv_TJ0fUd1Lblfdn h34_YVFifvdWQF4HI6znl2fzWPzzUqhx3glaEyMrwaLqMQuOJ jnKTFibZ X8ihQOBUgbCg=-Ow==

http://www.ranchsignbundle.com/nyB7m3LbwjMfwRv45nrDPWrUmykCXLmMtqG_KL5dl6YAfonpJYXfN08 T5ohP_1Qgo48cN1Rof0kw_WgaPSHWwtG9Aj0m2MCdhYfuXIEGOJiV4fYgEM9vB8yquDej dNY0cQMr HCK2pmQKzbIj_Ybnt khUTwGF4mxmocg7WuCJwckiAa4=-Ow==

http://www.ranchsignbundle.com/pW7WOQrHt ToOsCxC32FcJD3XusXSSMSGSaXI5EgKnbrcc1201NzvdEwT DXmoll6yD Q3mdc7cTvUI9blom9gb6oGyDP4VoP5XsZJhaf6TQUxi_z32_wZfgHF_4fcuTXdha66aVOaOhGLSTLhYVr8JxBRdEFqLuDIMJsOrpC5xSmRSNGUs=-Ow==

http://www.ranchsignbundle.com/B4IzejfVO5mDLEUWgoGPEaa5Q4oSNOV74NSeT7PZEVUmGNoQZ6VUQhYgXSa6rupMMQe0LicCgvCciZYWJA7HbIK VlXqEQ0DulvWhySziVeUvD2BNTgOfACbC92r WheO8aJRXTVsyoTblXav5uQvJ_PpogiRa5KYxnDermB6zyeRKyHd7g=-Ow==

http://www.ranchsignbundle.com/P7k0s9T3DLo65nCJtrzB_94WzlmmV3n5keK5JEJI94SguHlHCnxR AxBQchNf2MHp7OC7P4syzaCRCCfqeGHItUEX4a_rQUG5cP0qG2TB R4p721IrZCAoVae2QaQB_CeKnpVWB24mIv4AkMu3e2ZvoDbbJPD88EfYGtbSuwFum_8XHucoE=-Ow==

http://www.ranchsignbundle.com/D92Ms_CrRLZH8hhbpS3HDPUfsQXZkx1_WZRqSOAAgAW57VRswTbD6d6DbY7 IGJg_8rmTPsAQhfQfBTMon Sv2AiOeek063ZuK4iQPaFEEguVIwQpK5Zl5T_tEW 4HC3xYUmmWAX7ZcRmnafrHCxdkObcF_nQPiXmv7L940goCcwl_vfkuk=-Ow==

http://www.ranchsignbundle.com/x11XgxZGLxbi8khT2CFL0TtDm 01KvYvOdvRh2 2RWnh28u4VEUrk8GBKfgOfdNNYBmIhacyoIULW19r9GuiThesKVMUvo4kfjtDycbmGoQznP KYhDDf 1rJphVVbJ6MD3wAFmgYVJD7LRlKIRSxnwUX9nA0msmLH8LTs N2RF xQW62tQ=-Ow==

http://www.guardranchnow.com/5X0WUuqdH9Jdj56VHDhzCdkQBAqEnfzknR2EzmrBdc8o7MBnRC_UMk9no8oQZPz2UzeOfc38LMvdZ8lpgosOsI76Lgsv0DP7C7ANbsQglvPmvj37Y4dwiQlKgDdMeYYE73CN_08qJWeTlBMIGxLbNz2RzvrHfcCITHsP_WC1BALDABlFxfKx2XGlykXOgb3vZM ho bO8KmrYKYxzqsK9go3uLU0 Cm_3XbQbSRBNHe_BH36K4javAMnsgnYiDZ85F82QOKhkeBCRJQJk_98iBOhgElnaPShEV5i0NGfF 8IKoFSLPinmLBKSSz9GCZd9dvS4SUnzML63XsjoyXA0lnOOwLtJXVK933biew3dNSz5k64IwvzF4fpNd54je3zuGF3aWvb4JKjnf_jATTBaH8LnAr95jIP Fv0iwQkb7q79qCLmxsTrR55Zpmy_pwNyD J2mxjCUQSpXVL1D29cbSMyhid63hz9kJJEw5T0uCb5ePwSlpW8E8EcvklBm3djngshS_KQ1fh2PZkDcOP16 0djF_BS7cNXRMBZIjDxkarwD4Ol_IowSl0z2LRwe0itTcmxf5iXDHYu9zOK zZGjlccDr9mNy8nbhVq2mgITtfSr2jOkO1R5j7oYsaVyr9t4z12fNz_VMXIqIuRWEg3ofgoX45xJmUavP7U4G7ZwkYNPbX zEKM0u 6zw_RNOuVoLPoQKY_meG_AJp5RVEvSgsFc1I_Mh_AbzPM4yp9CjFlhaYWXx1cDuJQR2AOXfyLaZJ7CjQhKozTMDl9E_tSwBsuLAGaWUAtE13FLlyY5tT2DB9CBHCqDLQg6GlP7VYyahoOD8ZP145g5qo7YvzcsVjmNEw==-CwiAc29mdGRwbHVzLmNvbS80MDQD

http://www.ranchsignbundle.com/c?x=cgZheI4GCbrrzX7CMI5sPHkn3iBJ7Ed9heoM0Ea4nLI=&c=H3008ZlvIRMZteyB 4s4RS/eBsLauyUYuKpPMC0Z3Mc4M62a/Lkk3NdCdAYVw0Nj9yhvVg2mPG0kmvwQ4m9YHaAcEb2vQIHI7f7Nj69vhl/DM0rGYQ1FwG swgpYG7BSzTDgdq3JroAk9GxNGDwCnVBOpr Y4SmhM/.../404

http://www.ranchsignbundle.com/WVl6OTRQVkJyWkdRbE1rSldNV2tsTWtKS2JHMDVOamg0YVZOVE56VkhiazFGTTJoM1YyWnlNMGhCUVVWdFYyMVJKVEpDYUdNbE0wUW1ZejF2TUVkSFVXTkxTaVV5UWxoMmFtMVdUWFo0VWsxUWRHWmpTbFZETmtwTVQyVndhR0pISlRKQ2RrVkdZMDlGZGpWclRrVnFhRXAwTlZGRWIwNTNVMGhtV2xaTFVsWnFSM1pMWkcxaVJDVXlSbFUzTlV4bFZXUm5iREo1U0VOTU5qVlZUR1JSTkRVbE1rWTBaVFJTT1RGelpWVXdWVlJTUjFoSVVsTm1XbXd4UXpSQlRrSmhKVEpDVnlVeVJpWm1ZV3hzWW1GamExOTFjbXc5Wm1sc1pYcHZiMjF6TG1OdmJTVXlSalF3TkE9PQ==

http://www.ranchsignbundle.com/WVl6OTRQWGN5VGpZMGRHZEpaVEl6VFVkNU9HSXpXR3hQTUhwaE1XRTVlazFKTm5GbVVIbHhWemhOV0ZSSE5Fa2xNMFFtWXoxaGJ6ZFJabnBJUkhkbE1WcDBTVkpEZGtjbE1rWTFWbTg1SlRKR2FEVjVVV3dsTWtaRWVGcDVjVTgwVTNBbE1rSjBabEo2Um5SSFFXWndhWE5oUkVKU04zWkpja3AyVGxOemRITm5RVXRJUXpST1JuTkZSVWRrVVc4NWFHTTVjazR3WkV0VGMyazJiRzgzVldoQmVVOVdaRlUxWW1kdk5GaG1ZMUZOVmtablJsbE1KVEpHV0ZsSE16RW1abUZzYkdKaFkydGZkWEpzUFdaeWFXRm1hV3hsY2k1amIyMGxNa1kwTURRPQ==

http://www.ranchsignbundle.com/ROtST1o2lBqr77p FnV8YR0CC5n3Qf3IwzCJPodgd_WKHt4XizE1dL g DFadgH7ttSmwQQv TIF_w3BMsTFOaL2REprObUOmur7skqG1YgNSllYPk_KdVW54SKXu0sEXRoVpquQ9M1tXEZ2mAA7z3cxZUGicLyJeETBWsWAR7oZ8dAG0a0=-Ow==

http://filehippo.com/download/file/.../

Latest 30 of 230 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.