home

123_b022_multilanguage.exe

Research In Motion

This is a setup program which is used to install the application. The file has been seen being downloaded from swdownloads.blackberry.com and multiple other hosts.
Publisher:
Research In Motion  (signed and verified)

MD5:
2560efa6118ae05ed80dbfcedbcaa686

SHA-1:
fba064a6f314bbffe02d84ff134e144aa4d15c4a

SHA-256:
54812b30a57acb26e4eff00a80a92a63e505aac16f414018b4ec2e455c0fc424

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/2/2024 5:18:17 PM UTC  (today)

File size:
160.5 MB (168,312,336 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\123_b022_multilanguage.exe

Digital Signature
Signed by:
Research In Motion

Authority:
VeriSign, Inc.

Valid from:
6/3/2012 8:00:00 PM

Valid to:
6/9/2014 7:59:59 PM

Subject:
CN=Research In Motion, OU=Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Research In Motion, L=Waterloo, S=Ontario, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
097C6C5DFC077A4F64229C6E450BBE6B

File PE Metadata
Compilation timestamp:
11/2/2009 3:24:15 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3145728:fynbtETF7F6/8FlNHQoBizjdecUaGstgysgR2kOxQvbrq:fEt8F7U/8FPslJt/siYM+

Entry address:
0xAF1E

Entry point:
E8, 6E, 4A, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, D0, 4B, 42, 00, 89, 0D, CC, 4B, 42, 00, 89, 15, C8, 4B, 42, 00, 89, 1D, C4, 4B, 42, 00, 89, 35, C0, 4B, 42, 00, 89, 3D, BC, 4B, 42, 00, 66, 8C, 15, E8, 4B, 42, 00, 66, 8C, 0D, DC, 4B, 42, 00, 66, 8C, 1D, B8, 4B, 42, 00, 66, 8C, 05, B4, 4B, 42, 00, 66, 8C, 25, B0, 4B, 42, 00, 66, 8C, 2D, AC, 4B, 42, 00, 9C, 8F, 05, E0, 4B, 42, 00, 8B, 45, 00, A3, D4, 4B, 42, 00, 8B, 45, 04, A3, D8, 4B, 42, 00, 8D, 45, 08, A3, E4, 4B, 42, 00, 8B...
 
[+]

Entropy:
7.9994  (probably packed)

Code size:
76 KB (77,824 bytes)

The file 123_b022_multilanguage.exe has been seen being distributed by the following 30 URLs.

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=907FFE72E7EB93BBC1D770D7A45EC08C.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=BF9971215175E31931E13DD804C18327.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=F77C057B149EB550DC2700285AC45C9C.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=A3BEEAF7DF3B9C3008997FADC0CF45FD.node1

http://portalprogramas-download.com/d/.../blackberry-link

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=914F5EC59E2C0FAB7D6EB0EAA66C67D9.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=33DB974AC8F394690ECC704E8C300CAA.node1

http://cdn.portalprogramas-download.com/d/.../blackberry-link

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=6CBB7F92F733123DAAFE5E0881FAEFAE.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=82BF455092BC2284839B1637A7EE8DBB.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=E085D94956351FA476E988E0484DCF9C.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=70CA732196E5D5C9E8C73129B39C3BEA.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=DEAF0824869590D7D13A04DFFF2F1C16.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=F2209DA4E514CE26DE66C871834CA814.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=47ABBFF67261B954123932D5C68264AF.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=218107E21107594E609D3285BB347E0D.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=FE37647A1D695AB8BD85D867B3E65792.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=E87A55185907B86E40FA7B5E1CC77F5F.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=F73D20944030B2B480C75D8785A19C86.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=006A5C3375B613DC0851C1F0850FC0F3.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=E86672B3540415E84EFDCF1C6C0A1913.node1

http://downloads-us.blackberry.com/swdownloads/.../123_b022_multilanguage.exe

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=EB6C120A7CB7852A7B7A498FD1644C32.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=B02FCC1C21A4DF7A1E7D451C6A2E8356.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=597E83E4663015BC96B74A491FED0684.node1

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=68043BFD5371A32E1F821D9071A8C002.node1

http://dc645.4shared.com/download/.../123_b022_multilanguage.exe

https://swdownloads.blackberry.com/.../quickdownload.do;jsessionid=08E5199BE5F6F1F6338D9F652AAD743D.node1

http://downloads.blackberry.com/swdownloads/.../123_b022_multilanguage.exe

https://swdownloads.blackberry.com/.../quickdownload.do

Latest 30 of 30 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.