home

nokia_pc_suite_ita.exe

Installer Application

Nokia

This is a setup and installation application. The file has been seen being downloaded from ec.ccm2.net and multiple other hosts.
Publisher:
Nokia  (signed and verified)

Product:
Installer Application

Description:
Installer Application

Version:
2, 2, 34, 0

MD5:
6624cecdf23cd2abcfb3eb6a5d8711a1

SHA-1:
c7e2a4c2108dbeabbd11995a2cefea08a7ba4834

SHA-256:
e228714cb5155cc6e0ce0529080c94aace7ad8a71bff1e6e3f87734272f4fefe

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/30/2024 3:12:34 AM UTC  (today)

File size:
38.8 MB (40,718,016 bytes)

Product version:
2, 2, 0, 0

Copyright:
Copyright (C) 2006-2011 Nokia. All Rights Reserved.

Trademarks:
Copyright (C) 2006-2011 Nokia. All Rights Reserved.

Original file name:
Installer.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\ProgramData\installations\{866c4563-ed53-43f3-a29d-8bee2bd1ba3c}\nokia_pc_suite_ita.exe

Digital Signature
Signed by:
Nokia

Authority:
VeriSign, Inc.

Valid from:
1/30/2012 1:00:00 AM

Valid to:
2/18/2013 12:59:59 AM

Subject:
CN=Nokia, OU=PC Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Nokia, L=Tampere, S=Pirkanmaa, C=FI

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1CE53469130FAC35A9556F78ED1ACEB0

File PE Metadata
Compilation timestamp:
11/7/2011 11:43:54 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:w9HgJ0s6mnphP7xd2b2OhX97QJY6crVumj3n1edsbCzKEQFZJ+fVSuzH1KU:w9HyXxdnOV6Sr/1edYC+ZifVbxh

Entry address:
0x103590

Entry point:
60, BE, 00, 30, 4C, 00, 8D, BE, 00, E0, F3, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75...
 
[+]

Packer / compiler:
UPX 2.90LZMA]

Code size:
260 KB (266,240 bytes)

The file nokia_pc_suite_ita.exe has been seen being distributed by the following 7 URLs.

http://ec.ccm2.net/it.ccm.net/download/.../Nokia_PC_Suite_ita_web-7.1.180.64.exe

http://gsf-cf.softonic.com/c7e/2a4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=56712&instance=softonic_it&type=PROGRAM&Expires=1424774148&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=f3TgireAylLIEB-J3ZCJkiMk-ZoJHpnDmHax21upmfxxj0~Fv2ATCWE4~hA5UAh6QY56deyx7Fbvyqr7DbflrzZTVc906JoakdMNvYe2aWArWCcfAq-e6XkppHiXeIAikjnG3P2ADqaoWk3NKYinmmfNrXoitAVKwS0TVP-jBxU_&filename=Nokia_PC_Suite_ita_web.exe

http://gsf-cf.softonic.com/c7e/2a4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=56712&instance=softonic_it&type=PROGRAM&Expires=1425434118&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=KxZENr4yCpRE7gcwxX5dTwwvkbl6KzTJDY5D84pCP7MRCrqJh~HRTylnrxY0pGh1cNe9D76REmdvqwGsMY1xyb1O1ofItyPCAwOvs0okEcH5OZzdtHZHIFmHqRflipL2qh7WyJKlQ9KbQ5QCKwVYipI4oQrLC1Eweb5-gFsMnQY_&filename=Nokia_PC_Suite_ita_web.exe

http://nds2.nokia.com/files/support/global/phones/.../Nokia_PC_Suite_ita.exe

http://global-shared-files-l3.softonic.com/c7e/2a4/.../file?nvb=20150118145417&nva=20150119025517&token=0222e5c8f4c3547f62de2&SD_used=0&channel=WEB&fdh=no&id_file=56712&instance=softonic_it&type=PROGRAM&filename=Nokia_PC_Suite_ita_web.exe

http://nds1.webapps.microsoft.com/files/support/global/phones/.../Nokia_PC_Suite_ita_web.exe

http://nds1.nokia.com/files/support/global/phones/.../Nokia_PC_Suite_ita_web.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.