home

nrt_v2.1.0.sfx.exe

Nexus Root Toolkit

Douglas Cohen

The program is a setup application that uses the Self-extracting archive installer. The file has been seen being downloaded from ga1.androidfilehost.com and multiple other hosts.
Publisher:
WugFresh Development  (signed by Douglas Cohen)

Product:
Nexus Root Toolkit

Version:
2,1,0

MD5:
9805f96f89507df302da653d4b12b1ea

SHA-1:
01d6d9f8907be3a8327a0722cdf31876bc6c48ee

SHA-256:
1cbb3e88b66fefe67f32cf3ea388d5076a37a2224d1236f425394755f70cb10d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/30/2024 6:44:03 AM UTC  (today)

File size:
51.7 MB (54,193,472 bytes)

Product version:
1.0.0.0

Copyright:
Copyright (c) 2015 WugFresh. All Rights Reserved

File type:
Executable application (Win32 EXE)

Installer:
Self-extracting archive

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\nrt_v2.1.0.sfx.exe

Digital Signature
Signed by:
Douglas Cohen

Authority:
COMODO CA Limited

Valid from:
3/25/2015 5:00:00 PM

Valid to:
3/25/2017 4:59:59 PM

Subject:
CN=Douglas Cohen, O=Douglas Cohen, L=Brooklyn, S=New York, PostalCode=11215, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
38AEBA820DD32095F6849058A4B50602

File PE Metadata
Compilation timestamp:
2/15/2015 12:00:31 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1572864:/5kezowNScRxPAvNqYIz32/g283tkQP0PrOiNv/:/5FU2ScRxZYM3MghCQarOyv/

Entry address:
0x1D7CB

Entry point:
E8, 85, 63, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 56, 8D, 45, 08, 50, 8B, F1, E8, 82, FC, FF, FF, C7, 06, 20, B2, 42, 00, 8B, C6, 5E, 5D, C2, 04, 00, C7, 01, 20, B2, 42, 00, E9, 37, FD, FF, FF, 8B, FF, 55, 8B, EC, 56, 8B, F1, C7, 06, 20, B2, 42, 00, E8, 24, FD, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, 52, CA, FF, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 56, 57, 8B, 7D, 08, 8B, 47, 04, 85, C0, 74, 47, 8D, 50, 08, 80, 3A, 00, 74, 3F, 8B, 75, 0C, 8B, 4E, 04, 3B, C1, 74, 14, 83, C1, 08...
 
[+]

Entropy:
7.9991  (probably packed)

Code size:
162 KB (165,888 bytes)

The file nrt_v2.1.0.sfx.exe has been seen being distributed by the following 30 URLs.

https://ga1.androidfilehost.com/dl/1Di7YUyB1Ea6ymj1i_meHA/1452067851/.../NRT_v2.1.0.sfx.exe

https://fl1.androidfilehost.com/dl/cRsjqlHzj5EXjVxk95JztA/1450956336/.../NRT_v2.1.0.sfx.exe

http://tx2.androidfilehost.com/dl/gGVywARYYcUS-muFpSV7oQ/1449650003/.../NRT_v2.1.0.sfx.exe

http://qc4.androidfilehost.com/dl/sfbupGPp2omZyXA56uD00Q/1450165238/.../NRT_v2.1.0.sfx.exe

https://ga1.androidfilehost.com/dl/8bUVFCKFwWTJ9nYf2oV8MQ/1452133788/.../NRT_v2.1.0.sfx.exe

http://download.softpedia.com/dl/33202627ec4f3782b283e6fcf49164d8/567166c0/100213077/software/.../NRT_v2.1.0.sfx.exe

https://fl1.androidfilehost.com/dl/X0tLqIHMRtMWaIz0iLESPg/1451451415/.../NRT_v2.1.0.sfx.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&PHPSESSID=909dm2f7sphtljt572j4i0jrk0

http://www.lo4d.com/get-file/samsung-galaxy-nexus-root-toolkit/.../

http://tx2.androidfilehost.com/dl/ePy5UTPo7KizOFvWMKsTmw/1452845017/.../NRT_v2.1.0.sfx.exe

https://ny1.androidfilehost.com/dl/RlYZFBerxXUwC5OxHn7OYw/1452622045/.../NRT_v2.1.0.sfx.exe

https://fl1.androidfilehost.com/dl/gp5h43zVSHUNyR0AF-piKg/1451963412/.../NRT_v2.1.0.sfx.exe

http://tx2.androidfilehost.com/dl/k7Ai0lAmAfP_m-awImgLdQ/1452270369/.../NRT_v2.1.0.sfx.exe

https://az1.androidfilehost.com/dl/NUmMQUVbN6TlG8P3XM09oQ/1451215392/.../NRT_v2.1.0.sfx.exe

http://qc4.androidfilehost.com/dl/dnx8K3uU_dod7Hgj-X7pEQ/1449652284/.../NRT_v2.1.0.sfx.exe

http://s7528.chomikuj.pl/File.aspx?e=5EKk_0vjEgvFQUtPiGUmq4UQO1uUNiEVqG9hM-aBoVAZK_7gRVlZ2-tJzDTBXnxz1teIOB5FJgftXDBdiKbJzz12_WxE4aR7zugZ9tesKdXfRIp1F5ygT34q-VUhr_uGzsN-2uCT0VrVPe6yBNQmIg&pv=2

https://fl1.androidfilehost.com/dl/p66OW_2x5tRzPo7N6QbH-w/1448900221/.../NRT_v2.1.0.sfx.exe

http://download.softpedia.com/dl/26d373f5fa4dcbcd7007e3699827dd48/568a9c13/100213077/software/.../NRT_v2.1.0.sfx.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&PHPSESSID=atdgfv11f7qmn39r4q8b7oibe3

http://download.softpedia.com/dl/979cf4e4a4c803bf732a715fe1c5a463/56840b36/100213077/software/.../NRT_v2.1.0.sfx.exe

http://qc3.androidfilehost.com/dl/xBcws-nYsmtNSkM3qro2zA/1449636296/.../NRT_v2.1.0.sfx.exe

https://qc3.androidfilehost.com/dl/Bj7FuW_YmWfREArP8Pz6_A/1451492013/.../NRT_v2.1.0.sfx.exe

http://download.softpedia.com/dl/a7c1465672d475b2a1ff408bef099621/566c0879/100213077/software/.../NRT_v2.1.0.sfx.exe

http://tx2.androidfilehost.com/dl/f9KyVxilZ4Tq-YluoBcunQ/1451633882/.../NRT_v2.1.0.sfx.exe

http://qc4.androidfilehost.com/dl/wQTPTn5C3f1vs-LNdpH6GQ/1448468404/.../NRT_v2.1.0.sfx.exe

https://de1.androidfilehost.com/dl/L_fvD4zudDbJGbFLFMhI8w/1449978583/.../NRT_v2.1.0.sfx.exe

http://tx2.androidfilehost.com/dl/az6OGbgzE4b6XZUsJxsyWw/1449891575/.../NRT_v2.1.0.sfx.exe

http://qc3.androidfilehost.com/dl/TTLhJR34tnhgwkLo-r46Ww/1449483712/.../NRT_v2.1.0.sfx.exe

https://tx1.androidfilehost.com/dl/hM3k9Tv30CvcmovN8R6sMg/1451921826/.../NRT_v2.1.0.sfx.exe

http://qc3.androidfilehost.com/dl/jPlWKAFqq4belvRE9Q3zkA/1450136836/.../NRT_v2.1.0.sfx.exe

Latest 30 of 30 download URLs

Scan nrt_v2.1.0.sfx.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.