home

610_b034_multilanguage.exe

Research In Motion

The program is a setup application that uses the WinZip SFX installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Research In Motion  (signed and verified)

MD5:
5776c2d464ec1493152f670083ca0da3

SHA-1:
897bf8012b6ce83cb5ddfd03e93b551ce8ac213b

SHA-256:
d0d91641601949084b890976ebc75898d1532ca4d2c583f3e6a23f93576ca37e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 7:10:29 AM UTC  (today)

File size:
114.9 MB (120,485,720 bytes)

File type:
Executable application (Win32 EXE)

Installer:
WinZip SFX

Digital Signature
Signed by:
Research In Motion

Authority:
VeriSign, Inc.

Valid from:
6/8/2010 3:00:00 AM

Valid to:
6/11/2011 2:59:59 AM

Subject:
CN=Research In Motion, OU=Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Research In Motion, L=Waterloo, S=Ontario, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6EB37122E4EC99110CE114CCB597D223

File PE Metadata
Compilation timestamp:
1/9/2001 5:09:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.10

CTPH (ssdeep):
3145728:sJpFPeDQfSSWlfd6mxxiejqr/sCSNtorkOrDFrT:sJ/PFfVWlEzr/stTo4o3

Entry address:
0x3F8F

Entry point:
53, FF, 15, 4C, 70, 40, 00, B3, 22, 38, 18, 74, 03, 80, C3, FE, 8A, 48, 01, 40, 33, D2, 3A, CA, 74, 0A, 3A, CB, 74, 06, 8A, 48, 01, 40, EB, F2, 38, 10, 74, 01, 40, 52, 50, 52, 52, FF, 15, 50, 70, 40, 00, 50, E8, 9E, F3, FF, FF, 50, FF, 15, 54, 70, 40, 00, 5B, C3, 8B, 44, 24, 04, 8B, 40, 3C, 05, F8, 00, 00, 00, C3, 55, 8B, EC, 51, A1, 88, 94, 40, 00, 83, 0D, 00, 93, 40, 00, FF, 56, 33, F6, 39, 35, 40, 8E, 40, 00, 89, 35, 34, 94, 40, 00, 89, 35, 84, 94, 40, 00, A3, 24, 97, 40, 00, 75, 05, E8, 9D, D2, FF, FF...
 
[+]

Entropy:
7.9989

Packer / compiler:
WinZip, 0x32-bit SFX v8.x module

Code size:
21.5 KB (22,016 bytes)

The file 610_b034_multilanguage.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1486563646&Signature=fBW~n1PEDZgz8sWCSJ7DuTl3NgePYSf11bG7hsK8tAC8CHDsxSd0U2Ets2L0Vrdg1ObaSbvpUy-DHaFSCwvk~oZqyf7h4GXrO13CrQkuLUTGEscV5P6MESy7IZg2PG3NT408d06wNdmTyyekqc0FumddUpm2gChmSk3kFKszEK4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1484094529&Signature=L61ZpzjT~39j53TvZ~qDQrpD~OS5H5XTwlQfEyzxA6NtDVcjScMkBV37kaHWi91LCKcNva7kwyQIl-l3wYG6aMPOy5QhUcsa7MrisToXM6QpzfbIjiPYlkJv8FRAh4UGfHN11lmNkWmwh9Sxy18dRDoA702GzKW8viK7A3cVWQE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1465960114&Signature=P4qlR8ZoKw7o2kCtQBOTioJbUy~dX5UprycPzY3hmETS4mXNcVasftPHHce79KlhzBLOp3EHxu53cg9p0lE2s6VFUmXONp5YjAW-Tf5sv0jrp1d~xNZ-XWOn~dGJ15GcbFJaPoskHL649vpewaIJErmOGUWr16-gvKRtRiOwfOo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_es&type=PROGRAM&Expires=1468803935&Signature=UrT~9AW0orlngzUI5oN7FcCVSssDV2kZWx~3iB~GFLhV8uAyY-6PwimZ476WNJ7IXeocicPk0ip~Y1D0zrkBc57bNql9haI8~P-8CjocFwiEkqrft0OmnZ5dIJ55oMn7-gHJKGxoTHibjTQau5miEMOziOLkZAeaVY~~35IPn7s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1465285209&Signature=JXXvcWZwcGF-MKuY4m7Z5Bb20pQRAgTHsm~3tSKUzZcJ5foaymh6XWl~zBtTL-24rvdYitjktmiqo9~qEePz~KxlpBcxTm~ZN2ickuCe~-RqlCFS7PwlXb44Sw-ENzOt3uHIj4IZfSBIkOPaMyX4ZsxvbUmKz65twtE8eAorOr8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1461058136&Signature=ftEL4lHSlzD2ESYicgJ9pufI9AqX3LhxBA4ShVjWyb1dU064aziuMmgW7eu8lwUmju~tkE8yDn2yj-n4h7FeaG00REnmUjwSlCkHghi5bPKaRj1wFHJtCylnjCfAAAtaJ1H3tZrsHnJzuU9HcnUnVHyUXySIKIf~5nomFgbmpTI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1463060726&Signature=aqYMXXIXoYs2D1Hg~sV1FbnpUG1zvZVoQKsuaG3oh7kM2VAwFT-cvIlZNb~Z4ZECYQadpseznLtAmRXdBfNqmBAaBtx~EFtG-a7grN~u1u-CH6GkMYzVcZzN15rZHZVS1bU48Bp6jMAmt9rwPNPHHZnsRdE-j1b-x5sfQefALeg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1426047786&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=FPtLRL61oCcje2uA7K~lUHOlbFo0jwah040M~BEeHY5zCZWc3q2al13hzP3lmVRd4NAVvkw1ZwzktxNolYRe28JHPv2HE0OBwotutMnRMTxln-Kg333AvXfLvE4ZH7mPTNfPEA~lMbKgdMwSZJSWRXIz0xQGzJK7Xxio0Mwi~rg_&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_es&type=PROGRAM&Expires=1465171583&Signature=EX4Njh1IQJFYL8aPJCKW7nd0STwN6JFOr8BNv5RWRzX74i9OeqkqaiOpK3jv1iEmt2FeBTWr0Papt~d1PDXxH0zHUUV70jsZHOpy8gk2DMdxnS8waITMAp6KD0Gq~FkIzS9YmLdgx8AUU3hJ8zrzG4J5La0EBI3aUU1sCsHJ40U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1477423518&Signature=QGJ8Pd98FZ-XsszTi2jvF7yKTk4c8OFG5wROA5JrTsvbtcFv2jkw7y7fz1KPwUsFMAUsCsl2-8pEgrMYZyw8-3WU3gvLWx3mRuO~y7i0YyIdummu~vizA1PmrffhVhzeY7vg16wZ~SVv17XzZF9f1xmCn6EVGXYMF7qk4uaJNC0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_es&type=PROGRAM&Expires=1478506098&Signature=DDic~cUprHSccQU5NxS75OB0sTs84d1q8WcmOnwwttivXx0M7-U-p2ostkyNPWZ6Eoz2yHrzIk~kK3irKjjbVMQlNi6hJi3bTbSz9qYOH3dyyWh9xC9VYuElyrdL-3LeTRYtoo6ma9v9J90pujObiFaWG1U56m6Yjcg3M-qf6T0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1479398269&Signature=HLvsyd0A1degBZzkJYMNOS0RsAHIECWyphRB66-s5lV7wHhXi9Asi8Z3e4BP5deR8oVxI0qQqladeQzskMpFACZKAXMoFLVhzWd~Ix~DItyTJNFOcHyV5Th0-Ecjufkm-Jb1b7TRsJYWo3RgawzHGWFjIoddL3xjjdMOShhb3Ow_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://fileshare1180.depositfiles.org/auth-1474837279725369ddd2a334dafa72f6-190.104.119.192-2692037392-97503750-guest/.../610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1476928732&Signature=bWElo~KmakGXuCaNDvAuSocnpiu9SbR~oGaS1VD3dfNDSYR6~e7bj2ruYRIvsQR7Yp46Rk~-FYwWEeXCh-CcFeBPK56kBHwczeTq6NrfJVBVSfnMimAkNktMLWQgr0wrHKVEu5r785LBs8RxxA2cuBhd8xG~K5GiwNHn5COiYUY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://fileshare1180.depositfiles.org/auth-1478796245f1d8520b36efdda8da4644-190.79.216.24-35242544-97503750-guest/.../610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1470650319&Signature=YurJiXrOZAGvt5QfHufZbb92EfIZSQL5DXeFIrDaTOK4eWDR4sY0qcoFVdnwD2lohSCH5lsvCPnV-Mj1qhpDrBZQfDbLI52v9SyufRJHPX2s5lbcgqAPABJI~gzrkXss9jmTo7NyarTdNLVb2quqwrVsapQCuT186F4SLfBNKvI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1441321748&Signature=bVmeFK9wN-OyeSzk680FTfk6B5fdLBOYMgxiGvNaGBEC0VBYIz67iLULrl-W4trTpx8Ib4-dFXbiuJZLvY4~St7LEQS7yD8cSVR0aQGrki5II4yitE11VswaHBSQ~SmuB3uF6fvuKApuybJ84cE3vj6CqjkxvM69MwgPA5hxjpo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1464346710&Signature=InDXTcSkBrqbseLmUPsCSETrofQIBKOVa~J7GrDVTGSdPsl67ppx0JTMRR1nPrm~xIZqVM4ysuiUAiE7pZa8qg1Z614WZP8mOU5CxUCVdgy0nJjYWUsrC0vJOMmUp0euWokyAfmpwITAVO~oK-Z6iWcU9YWn5sRad3eA5PgxP10_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1477859671&Signature=dS0BDElS9Gy30MdKHmZxfhXQwLyWKN3~u4SVSvJYZlFr~FAmF661pp-x-Zdslqx4T46e9NCUR5YBIo7GP~FNa7Ms5NFxjvh9NRZvVMc0292jUxw8qRaICUkRwf5R7FmZAFGarkyMWYykCS5AJoZOYAEbt7tHxbnHOfygaJYrv~A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1426327809&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=arP2jMe5qFVL-WULmfdkLmH6y~~WCIweWRD8oG7oPmpv0WJJmPpjnFMZTFYbx6~UxeKfZ~4IWqWEv9NbMRnLt8qzY3QfjvqhqsFFB7U6KMkLeXgapvbcBS5mCaMiOGOtXHNi9kZuz27VdAVpYDKEpbRcOqVT7bHSEMeQIwhCZKo_&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_es&type=PROGRAM&Expires=1477313620&Signature=FGckTsPTTrObGUUFZ4y7iXMvj7VGoKjOk0-83wQyL3zEiYPIcGJPH3A7FcKeBq7DHyHkNbiW-r0402-h10~e6s1LGZKWoNB9IYr1bLnCpRT0OEFqRiL5gBONY28cRs4jRgRNkcR8U6Qk7PaSqnc7FgFCPw6ug1Is85W-DRvZvAA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1477556393&Signature=dTTnN-67CbPMDII9UKDlLsldrZ4Tecb40uo5jsuVamNa1V8m8u6phsUtl-A6Ppjnd9ss0XZEyrrnlToKvI4VbEiTDl7IrnUDzetV5wPvxQOSymIfXrNmgaaAiZFK1uOBBg7ezYhKWs1sBIE5DUSPAA~oOsAqum7EXc03VGhGMn0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://fileshare1180.depositfiles.org/auth-1475538639d93acad1a221e3d3407351-200.84.55.52-2114738-97503750-guest/.../610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1471080008&Signature=PnQOz9uq3wrnJUpyptOzjxNkYDe7OFgJdtd4rlCi5rf07pXlT-w9aQc7KiOrP6K9F99Lziw2xnhwZsWWTP3R-50IFfEQhZFbEMDlx6dNmnkgDkDsiaw7VNUMR6OqrKwlSazUrEMcyEPdJsLjjENwqI~MDWfXMyQrVNGStJ5hEfE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1477355838&Signature=cmEii7NpPmgPqHKg5Z3VChxEA6m-jBfE2pTOcYsONwUaHpe57NZQVhGhvgwICt6TuN6MhWKfokSmt-5EJWEqcTR6c93opTxNz1hI-tfAX-P3cYbdNm-Tdl9xU6oV2~rTUjaUYHOTw5EM8eq5Y21OUP3jYp52K8GDoxuErtmo0g0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_es&type=PROGRAM&Expires=1477365647&Signature=JahrQFSXYfzSxUk6IlLhNp~uZabOBTbDEPyMX6zc91JEe9gcDsiG75F7kuYZhiH2fpVw7BAMEUc6GwfCzUXCZi1KosCwLooVO4uCn70fZgOiYociBJ8yQBDIdZzSmNWMKILYRMMtYdmADLqyHozHZSSqT610Al4gMDWMqp7xS5w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1471926323&Signature=h8v6NCUykHl~MVHdymrXaeCGbMmfLzQ~gkk5CBsEZYK0cbW73J3z3ed64ozUqxITrdh6g1wH1Y7RMPj2cMzrONG7Msm0m6v8H1Z6gvRebAtSGIsFDTvlDKdx9bsh9YPh256PKhgUXyoHcMZB7H5XF4VirKShpJhgAI6XBoTcyL0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://w6.mien-phi.com/data/Soft/2015/11/.../610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1465347843&Signature=APNYRRlNfzCQTh~~~v3tgTl2T3NxhVORPaCTyKS1~R43DfkS1QDWf0ks5bfz6-ty1kfftqg7YHKV2oy9XWo1Nz0pEEb4GXGu4TxZCCa~JhVsdw7a5PfOwleT~hx2evTNZw0YqJgas61FlYK2CtP99vOeCKLlNIczCDnsTUgcyxE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

http://gsf-cf.softonic.com/897/bf8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96835&instance=softonic_en&type=PROGRAM&Expires=1478249331&Signature=FeaQ67RjK7RvgmMoI8vW0-24xryVVbrCjUZFIhoFb0u7EaXKBrKPpE4kwjKBM-UTzwQf74LewSLEWLPAR2J~lsTECpR0H8uE8oDhyww5Svy96uj1Snlk4ydjIXLBlMIIZmeSXp0qNVe~CXSI84QSETJ5vU2igle4YpJykU~50zE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=610_b034_multilanguage.exe

Latest 30 of 85 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.