home

itools-installer.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from www.ranchsendgift.com and multiple other hosts.
MD5:
cfbc8554dc72e8cf82bc69fd75530e35

SHA-1:
316777fbc7d88aaf65c7cf60621fa7521ccd1c12

SHA-256:
ccbe1f52105302b4b3d2939865a81162999229ec1ef37133a4303c5e3042bcaf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:51:29 AM UTC  (today)

File size:
3.3 MB (3,492,429 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\itools-installer.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
98304:ifJ+vMeEbVLX1aw8G8d28irpDLoeaN5wk:ifEvnKL8w8GC25rpvoRN+k

Entry point:
50, 4B, 03, 04, 14, 00, 00, 00, 08, 00, 33, 68, B4, 44, 9A, 75, E3, 82, 40, 40, 35, 00, F8, 8D, 71, 00, 0A, 00, 00, 00, 69, 54, 6F, 6F, 6C, 73, 2E, 65, 78, 65, EC, 5D, 7F, 7C, 53, 57, 15, 7F, 49, 5E, 4B, 80, 48, 83, 0B, 5B, 74, 99, 54, 8D, 5A, 47, C5, 6A, 3B, 2D, 86, 69, 80, B6, 14, 29, E5, 25, 69, 93, 4E, 7E, 14, 15, 31, 8B, E8, 10, 92, C1, A4, 14, 30, AD, F2, BC, 44, 51, 51, 51, A7, 4E, 9D, 7E, A6, E2, 44, C1, 01, 1B, CE, 96, B2, 96, 1F, 65, 2B, EC, 07, 45, 60, B2, C9, F4, D5, B2, AD, 6C, 08, 65, C3, C5...
 
[+]

Entropy:
7.9989  (probably packed)

The file itools-installer.exe has been seen being distributed by the following 50 URLs.

http://www.ranchsendgift.com/8K5m0U4snipfyB0IYlAoi4jgaKOfrwybQXkosASVOb9JSos97d3f7jV6OAdY6u2zTtS EpDF5NM6LYVMhfYhPsOeVS7fwerdOzomRgWjSmbS3xdeNct 4vZUxieY1rsSfXOiwGgQHvKYGZP7xgXnnmz1J ld8WMzZDR1V2F9k71F1oepBylTQ2h7uByKGlqMPk0z30Sf1_1n_OVn42fyfo56RKMgw==-GyYAAETdFtt Dg_R0AzxweHggiazEF0kqga08SkF Lp1sbaVjFM9wwc Dw==

http://files.downloadnow.com/s/software/13/74/34/.../iTools0520E.zip?token=1466403564_212c580e6e8726a22853c77c6601ff9a&fileName=iTools0520E.zip

http://files.downloadnow.com/s/software/13/74/34/.../iTools0520E.zip?token=1482273600_6a0384d3199c740f60a224844b6c0e3b&fileName=iTools0520E.zip

http://files.downloadnow.com/s/software/13/74/34/.../iTools0520E.zip?token=1465077598_c3375783bbd8d6712069e25903bedf82&fileName=iTools0520E.zip

http://files.downloadnow.com/s/software/13/74/34/.../iTools0520E.zip?token=1478232434_ede1abf061cd3af96825da1bf4332230&fileName=iTools0520E.zip

http://files.downloadnow.com/s/software/13/74/34/.../iTools0520E.zip?token=1477012463_bd4ff88eccb36fbea4d685e0c90de70c&fileName=iTools0520E.zip

http://files.downloadnow.com/s/software/13/74/34/.../iTools0520E.zip?token=1465639765_e2a46231b50aeef8d6ec3fd7b7dbcf0e&fileName=iTools0520E.zip

http://files.downloadnow.com/s/software/13/74/34/.../iTools0520E.zip?token=1464408345_9dcdf9f7869f0fe7a0c4659b2aa6e929&fileName=iTools0520E.zip

http://cdn.dumpsetupworld.com/c?x=35Jcke4TKP7/GV8MCc3GX5jGmHd/qRsd WAWtZHbvOo=&c=DeZfHhPQTftBmr3y8nOMnzgrUqXWE8Rr9PxHWd9l7HCrAqhVvP6dMmj24rlH/ha6ykN4VBl mFftKNXQLzlPcg==&fallback_url=http://dl2.itools.hk/.../iTools0520E.zip

http://www.ranchsendgift.com/6GgKWhBoG3UxlZ0mOHuyBrSzWXZpDvYqnZK9dWPC3bTv29mga7rziCobEoamjB3wBZu78 U9kYJO_klPLeMDdJKVeWwZ2a_eBFC7SQnypCjPMNCFIBAPAKoeSeELci0BPJKIeeHK_consq1BEQLAAZ_3vEw7YFXVcIH0MqkaF3x3VZp4RBg9B9H4 PdN9iwRyt7lB5GUyiyLBvX_Q4WRgGlaGAKyA==-GyYAAETdFtt Dg_R0AzxweHggiazEF0kqga08SkF Lp1sbaVjFM9wwc Dw==

http://www.ranchsendgift.com/ WuAWIHnNPO036FbzKVM_37wmLc3jL8Os9WpBgh3aSy9PpcSxCu7YFg 0mXdP6eQl4REpM70iimnA_uCpwUL8mLfNgOmh2iwPKg0QZERqpgluR7bk6u3Fkt60lVTdyoqRF eWOGg9BpiknjCSm0vfwqKJmawDqwIrXXmNsJwCW6OVaG9H_qVPCsJ7JClMi9jW9uoRVuMbR0s_Jw4PnceYGjwm0258Q==-GyYAAETdFtt Dg_R0AzxweHggiazEF0kqga08SkF Lp1sbaVjFM9wwc Dw==

http://files.downloadnow.com/s/software/13/74/34/.../iTools0520E.zip?token=1482003215_bf9afed614f33e956d95ab2ae6d8721d&fileName=iTools0520E.zip

http://files.downloadnow.com/s/software/13/74/34/.../iTools0520E.zip?token=1469631969_c6323cbc6fa8ef0e831b4fea986f0923&fileName=iTools0520E.zip

http://www.ranchsendgift.com/NTSvMiNLt8b10VQzjfxrLxO4ACXb495i2ELoRudv6cxd4VVOVNr_HgyFscNOXnR_PD5HZrWITBj3DQFmqpaQta2bl2Zer8ogctLos MMUYLy7voUwY6bgMwJGaCFvhdvCSZEtA7OW3Tkr9XpUWqwmrYEoECL9K5c8h2pHQxM6TFfYNqQbOVQd8PdFSZEPXP_kHhHz2d_1HFQmG4LMDLyeR_Y4Xzq1w==-GyYAAETdFtt Dg_R0AzxweHggiazEF0kqga08SkF Lp1sbaVjFM9wwc Dw==

http://www.ranchsendgift.com/wle5A8pfp90gcmaKSRVXE9oFo HV0kZxffBJZSg9rxZJMwuuGFRNhWRg5lE6_AKPTTLXw7KXAMGV7xgmkn74_5D8Ltqd GqgYh5qvPnQeJLx70procTs4WYEPqwzt hCkapN_9GyFud3le1aNWh3lTXlxh4uMXxuLIAhq3Al1AjatFEbM53 BZ EpLU8gLTVJrqJmedKLPgdjKrIffApImQLiMOxzw==-GyYAAETdFtt Dg_R0AzxweHggiazEF0kqga08SkF Lp1sbaVjFM9wwc Dw==

http://files.downloadnow.com/s/software/13/74/34/.../iTools0520E.zip?token=1476538882_029bada1de725b1d4d29bf9737939391&fileName=iTools0520E.zip

http://www.ranchsendgift.com/zLSPGF zHHVytoyWgWs6LSon8LjhByYzz6fPBGzVzFyRWUWd4fAttuR9JAnDdCXeyFEsYVoeCT7V3vJFoKPl3zD8tlfyy9acHPG jPxFa ercSNSppYEAS09X2uIg RwrL3KdETCu8OfvkhUkXIRwV_sK760jmbda1YELorD8rMP4j7QwlDOcJXv9E4hK6rzO23PblHjfZq2RYjzPaEMISwaIK5J7w==-GyYAAETdFtt Dg_R0AzxweHggiazEF0kqga08SkF Lp1sbaVjFM9wwc Dw==

http://files.downloadnow.com/s/software/13/74/34/.../iTools0520E.zip?token=1471479021_474722ad7e3504e49f90acd857d264c3&fileName=iTools0520E.zip

http://files.downloadnow.com/s/software/13/74/34/.../iTools0520E.zip?token=1460868341_e68564f4123509e4333a8b258b74ab26&fileName=iTools0520E.zip

http://www.ranchsendgift.com/Pg7ZNtqB2uiJZQVHj6_NSWr2Y2p280PDmczyd7F_bd7qF7MHTQQcsXYiqQYiaxNRSZqnTrDLyLKTV14i7SomujtmObVV4o33S5f5XLR2lINY228wW8hQ1en2Zsu7uePxrcmBQrtsb3ExXIgkrLJU2nYopxmVJv6L53b_8RxNBHvd6CE8T4DfCLjnoj1Ocy510jQO poOXgQeds HIEFPDNflwK6U0g==-GyYAAETdFtt Dg_R0AzxweHggiazEF0kqga08SkF Lp1sbaVjFM9wwc Dw==

http://files.downloadnow.com/s/software/13/74/34/.../iTools0520E.zip?token=1476844702_b0154a7cc3ff7290c422fdf3dc152d53&fileName=iTools0520E.zip

http://files.downloadnow.com/s/software/13/74/34/.../iTools0520E.zip?token=1479098302_cddda991002dcf5321caa116bdfdc521&fileName=iTools0520E.zip

http://www.ranchsendgift.com/K_Vt6hOaRPKB10xx7wtzNYdaqN52uJE_9rNjUdB0IW1qWNIj3F_ ExGzyg8PRfrBpXkbY8SnlBnUymvWpSAMtCIToS0JNXCVzwxD1dIJEoZQOFEQys_aTBLESYc19EaWe2Ph4up6vLzemFGMyUYuwpyLe6hKLV3sDsun7C2x 8qSh5yGfR3Sm_c1Uv vFHC9L2a4bAc7O_ME4IPRk8gbmT1IGhX3PsoVNCfvYT9GJNqEhtfYX0bz3 YzTU_H3IpvIkwK2w8eZpI4wfBFiClN6rds nHxIiVEpR z07fS2LVk2HoYcAAIemxulGSA 2GI1hFSH1xxamLroWhzNrEIY6Sz9PewGv_f5WxVvdYd4ubTw0T5eEDB oq8lDZoiubS0DmGkPELBzoUiMonCREBS0VMMfm3yuCCylqN5MB jkPp2GfvUoOlFBBDK51nlx635nTI5cUXSBnZWJ0uYJ4VMR 5gK2RaauklZFhrQBhVmGVoW1c el_JvpTprB2uBDmfyM2JPV5jNvV8A27wXWQuhQA6DMZXJFPYqIEjReiYuCS6VXvt0A=-GyYAAETdFtt Dg_R0AzxweHggiazEF0kqga08SkF Lp1sbaVjFM9wwc Dw==-e

http://www.ranchsendgift.com/vDe6rCy5rHcB6E4rUpm7KpJL1v07JPmDqOg6KpmKY57BTjp RRmwgD potgpsFbGLPdabOIAj9B5Yzn3Z5eWfrCvOuAX_Guf_EbUGSbVgH_eioqcTj26dfH4Qr0K_99NgV8PAZJnGY9h0LYz9eJTS1f0l6gz0IEfPziZlp XH GL6ZFZ4wD9_1c3Z8vTLK0OhMAIGn8SQXbqYq ZjykxTFLhWNtEVA==-GyYAAETdFtt Dg_R0AzxweHggiazEF0kqga08SkF Lp1sbaVjFM9wwc Dw==

http://www.ranchsendgift.com/nif_Ktrt69ahuSMqF73RZqtCEJy3r1SCfZDebcL85056h78Y9UrPtz9 HJ3JwYRvdvxZxm3Is_whPk2EBuBVmbF U4CavBPygRAYs RBpWDQ2sP96DejmbHyvc3vVPgYsgQfLej7kL5_Tm2BIPSQrbqhxlMCUe 6jl8LiZmcvmrD1K7aVrS6ud5EisJPAlVshO73BrESeY9n5MAoNzMjvxAH1zX48Q==-GyYAAETdFtt Dg_R0AzxweHggiazEF0kqga08SkF Lp1sbaVjFM9wwc Dw==

http://files.downloadnow.com/s/software/13/74/34/.../iTools0520E.zip?token=1477295051_bf9f6b4fc71d6cefd9acb233eace9258&fileName=iTools0520E.zip

http://www.ranchsendgift.com/s3OMhSr50BxSE X_xNBkBRyywYBmwca9IGBIO3BGQMSkn5QKW9VvIaw55RnNRxwkRDxUCyBhUxXlUY MpTTNxbkqArZf05YwFjZQbFwHtc4iptgASJGnAlkCEornxevfSrjCHNicp0 sMxQUP3 H_N12VopzxyJkOj _1wZqOAznyqydhGctt62xp9IuUBRdOclUq4yQOBBn4PqVTkqXpuH7OAvnXg==-GyYAAETdFtt Dg_R0AzxweHggiazEF0kqga08SkF Lp1sbaVjFM9wwc Dw==

http://files.downloadnow.com/s/software/13/74/34/.../iTools0520E.zip?token=1477968925_97959046f73c39f4a85b8e40cd80e86c&fileName=iTools0520E.zip

http://files.downloadnow.com/s/software/13/74/34/.../iTools0520E.zip?token=1477839703_de3d547e4c0cc0ffd4be0f290cd5b365&fileName=iTools0520E.zip

http://www.ranchsendgift.com/rGan5eY_Ui96F1cqWL0Sd6grU365vjmvU8A7FelQXWfJ6w48w982W2GQzDc_Ip53bWERHRrGZkzR2ZB8Z33BgnmPcBAX0_JcoEzuG4_rypQpxGmErF5Pc1UmAyj4z5wvC3xFdnEVZdBWyOgyPoaEx227VxZR9i3aC7inC6ISzPjan9o8CCHArTSlqjlBRHjsE3c47BiM38HW2Ie1_9aoFCnuHaWv7Q==-GyYAAETdFtt Dg_R0AzxweHggiazEF0kqga08SkF Lp1sbaVjFM9wwc Dw==

Latest 30 of 60 download URLs

Scan itools-installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.