home

nokiasoftwarerecoverytoolinstaller.exe

Nokia Software Recovery Tool 6.0.5

Microsoft Corporation

This is a setup and installation application. The file has been seen being downloaded from cloclo21.cldmail.ru and multiple other hosts.
Publisher:
Microsoft  (signed by Microsoft Corporation)

Product:
Nokia Software Recovery Tool 6.0.5

Version:
6.0.5

MD5:
aec95ff6efd88ba067a14b18c53239dc

SHA-1:
f3f6bb306c6693391e293c2b670f98a630c7db2c

SHA-256:
288347ff79e7d70acb89949535a23498964199839712089f576d2b2c5cf54ffa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/5/2024 10:57:44 PM UTC  (today)

File size:
18.2 MB (19,057,568 bytes)

Product version:
6.0.5

Copyright:
Copyright (c) Microsoft. All rights reserved.

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\nokiasoftwarerecoverytoolinstaller.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/4/2015 12:42:45 PM

Valid to:
9/4/2016 12:42:45 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
12/8/2014 4:44:59 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
393216:CJ/hRcg3UcZjO8nAMzBvvTDxz29XRcG5wF/sqwOCCcBN0K2fHX:CZhCgkIj/hxz29X+GwtsqCPT0KsH

Entry address:
0x2945F

Entry point:
E8, 00, 3A, 00, 00, E9, 7F, FE, FF, FF, 3B, 0D, 00, 20, 46, 00, 75, 02, F3, C3, E9, 89, 41, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 7F, 0F, B6, 44, 24, 08, 0F, BA, 25, 5C, 3F, 46, 00, 01, 73, 0D, 8B, 4C, 24, 0C, 57, 8B, 7C, 24, 08, F3, AA, EB, 5D, 8B, 54, 24, 0C, 81, FA, 80, 00, 00, 00, 7C, 0E, 0F, BA, 25, 60, 20, 46, 00, 01, 0F, 82, 3A, 42, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8...
 
[+]

Entropy:
7.9718  (probably packed)

Code size:
270.5 KB (276,992 bytes)

The file nokiasoftwarerecoverytoolinstaller.exe has been seen being distributed by the following 18 URLs.

https://cloclo21.cldmail.ru/BcgbTbhaFhmRD9FxJda/G/.../q82fBzsMr?key=5660ab0f83853daddf882d1896b93451c730cec3

q=http://go.microsoft.com/.../?LinkID=525568&redir_token=-Res6Bwl3oYwUM7yo83CJPvVqaF8MTQ1MzQ4ODY0N0AxNDUzNDAyMjQ3

q=http://go.microsoft.com/.../?LinkID=525568&redir_token=kEmX4f-zuTOQuWZhOVgoSrlrq7h8MTQ1Mzg1Mjg2MEAxNDUzNzY2NDYw

q=http://go.microsoft.com/.../?LinkID=525568&redir_token=5EacPjhjuihXBIpcPkmHoqz1fwx8MTQ0OTM3ODk1MUAxNDQ5MjkyNTUx

q=http://go.microsoft.com/.../?LinkID=525568&redir_token=LEojEikiz-maIspSt0y4pZ1ZvA58MTQ1Mzg1NzQxMUAxNDUzNzcxMDEx

http://wordpress.redirectingat.com/?id=725X1342&site=nokiaworldhun.wordpress.com&xs=1&isjs=1&url=http://go.microsoft.com/fwlink/?LinkID=525568&xguid=55b70dfdef3b550952c15e0d80f58ef8&xuuid=8c32f82e5e550acdcc0a6b44e75a222e&xsessid=3235e36a4356508665c425f190e6b30c&xcreo=0&xed=0&sref=https://nokiaworldhun.wordpress.com/2014/07/15/hogyan-allithatod-vissza-lumiadat-a-nokia-software-recovery-tool-al/&pref=https://.../&xtz=-60

http://wordpress.redirectingat.com/?id=725X1342&site=nokiaworldhun.wordpress.com&xs=1&isjs=1&url=http://go.microsoft.com/fwlink/?LinkID=525568&xguid=1305d65f16dbd4f3b4d794236b2586fc&xuuid=676b97ffdba3b22b4769eb454224aa0d&xsessid=c37dff922e32838cba28ad119dd5c02a&xcreo=0&xed=0&sref=https://nokiaworldhun.wordpress.com/2014/07/15/hogyan-allithatod-vissza-lumiadat-a-nokia-software-recovery-tool-al/&pref=https://nokiaworldhun.wordpress.com/2015/02/13/.../&xtz=-60

http://download.fds-ncom.nokia.com/supportFiles/phones/files/.../NokiaSoftwareRecoveryToolInstaller.exe

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=iig8ffaxgj00xkod02e0q&murl=http://go.microsoft.com/.../?LinkID=525568

http://nokia-software-recovery-tool.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPMZcnjep0sfWoMbP2MGfZcbB6fbYd4GhLWI/YzPbKCMNE8nJmsJzI5Ko3IVZ/SsYFMRB2YaAhLjgui6DOh qH92p7qatmgXAzPU2KjnM75JXVmJZZfU63d/.../EaB

http://www.programosy.pl/.../pobierz,nokia-software-recovery-tool,2.html

q=http://go.microsoft.com/.../?LinkID=525568&redir_token=lPH_viYlqu2q8v4Ognv0y6yFZxN8MTQ1NDM2MzMxM0AxNDU0Mjc2OTEz

q=http://go.microsoft.com/.../?LinkID=525568&redir_token=Wvw8r70C3r7DOFsmhLDRrxCvQKJ8MTQ1NDg1NzYwNkAxNDU0NzcxMjA2

temp:NokiaSoftwareRecoveryToolInstaller.exe

http://allnokia.ru/.../download.php?id=111

q=http://go.microsoft.com/.../?LinkID=525568&redir_token=LwKEsaFnPZRqAll8EuGiV4opmwJ8MTQ1MTUyNjc4NkAxNDUxNDQwMzg2

http://download-fds.webapps.microsoft.com/supportFiles/phones/files/.../NokiaSoftwareRecoveryToolInstaller.exe

http://go.microsoft.com/.../?LinkID=525568

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.