home

windowsdevicerecoverytoolinstaller.exe

Windows Device Recovery Tool 3.1.5

Microsoft

This is a self-extracting archive and installer. The file has been seen being downloaded from go.microsoft.com.
Publisher:
Microsoft

Product:
Windows Device Recovery Tool 3.1.5

Version:
3.1.5

MD5:
1236ac582610354280375caf861a6d5b

SHA-1:
4bfb9fea095ce432106c33e4c0d90d7e5b60934e

SHA-256:
a0e6f2dc36d2fb5ff288babf1ceb35db28ca7e535a6f312e96847b774a9a73df

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 3:48:47 AM UTC  (today)

File size:
2.3 MB (2,436,192 bytes)

Product version:
3.1.5

Copyright:
Copyright (c) Microsoft. All rights reserved.

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\windowsdevicerecoverytoolinstaller.exe

File PE Metadata
Compilation timestamp:
12/9/2014 4:14:59 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
24576:Oi+nwxGDdPYl+lj5Xme42ISPMpul1AdtyZnSw+7OTwbR9XWIQZBFdt2/HsTgeVFs:QnwLl+lQz2PM00yRy9XEFbvwi6anjy

Entry address:
0x2945F

Entry point:
60, 81, FF, D6, 5C, 00, 00, 73, 06, 05, AF, 85, 0D, 96, F2, C0, C4, 76, F6, DC, 69, F7, D2, D7, 04, 59, 0F, AB, C1, 0F, A5, C7, 0F, A4, C9, 8C, 80, C0, A8, F7, C1, 79, AA, CC, CC, 8D, 05, 69, B4, 05, 0A, 3B, C3, 70, 05, 0F, BC, C9, 0A, C1, 55, 0F, BE, CD, 69, C2, 29, B9, 16, 9A, C1, CE, 50, 5D, 15, 12, 6D, B8, 51, 8B, FE, BF, 90, 32, BF, A8, 83, E2, 00, D2, D1, 33, D5, F3, 8D, 3D, 4F, 7A, C9, 7D, 0F, BE, C4, 0F, BA, E0, B8, 2B, DA, 0F, BD, C7, B5, 8C, 0F, AB, CD, B0, 9C, 0F, BC, F2, 84, C4, 68, 5A, 09, D0...
 
[+]

Entropy:
7.4438

Code size:
270.5 KB (276,992 bytes)

The file windowsdevicerecoverytoolinstaller.exe has been seen being distributed by the following URL.

http://go.microsoft.com/.../?LinkID=525569

Scan windowsdevicerecoverytoolinstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.