home

bbinst.exe

Beijing Flying Bird Technology Co., Ltd

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Beijing Flying Bird Technology Co., Ltd  (signed and verified)

MD5:
64503de86fec6d32d1a08f5ae97f49e2

SHA-1:
53631519a6c69c1cc3df7dfc2d232ede90ecc4f3

SHA-256:
ac17e0ca5a1f8d490d91ce01668174c205ddfb96b6e8fbd735c006b751a7f03d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 5:31:10 AM UTC  (today)

File size:
3.2 MB (3,379,904 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\temp\bbinst.exe

Digital Signature
Signed by:
Beijing Flying Bird Technology Co., Ltd

Authority:
VeriSign, Inc.

Valid from:
8/8/2011 2:00:00 AM

Valid to:
9/7/2012 1:59:59 AM

Subject:
CN="Beijing Flying Bird Technology Co., Ltd", OU=Development Department, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Beijing Flying Bird Technology Co., Ltd", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7C599AF3502E1F740A8C743BAAFAF722

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:kWF3RLigvg571XySNpWG+WIDQ6d7L794bVnL:fLvkhDpeDQIZ45nL

Entry address:
0x999B0

Entry point:
60, BE, 00, 30, 46, 00, 8D, BE, 00, E0, F9, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 19, 8B, 1E, 83, EE, FC, 11, DB, 72, 10, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 78, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11...
 
[+]

Entropy:
7.9933

Packer / compiler:
UPX 2.90LZMA]

Code size:
220 KB (225,280 bytes)

The file bbinst.exe has been seen being distributed by the following 12 URLs.

http://gsf-cf.softonic.com/536/315/.../file?SD_used=0&channel=WEB&fdh=no&id_file=25849&instance=softonic_es&type=PROGRAM&Expires=1443983700&Signature=VHXoamfO7yc2M53d9t~B1hIlVHw2CoR3BQ71jeHeBtFo29Pgah66LdsLelYZHXQ96PcxQfjOJXzpW-etliZ0pMSv6nM9GZeAJW3RF71PX21V60k5M9oqGeLDyQSy9fUlGEk9RzCOAdg6dUzFSVNGoT72cEZSLf4wJy5ooTVFF~o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=antiporn_setup_17.2.1.11.exe

http://gsf-cf.softonic.com/536/315/.../file?SD_used=0&channel=WEB&fdh=no&id_file=25849&instance=softonic_es&type=PROGRAM&Expires=1440305602&Signature=CoUX-C126wgCYJtn4tfa3ctD4uDWxKMXfo1Wm9bru6HmlW1~1ZDyvdz8NiXufy4l~oiIbhWEEzYMVZjm0pamQeo5L4SQz4yZ~MEndbTnS-Q53i48VGMh4SJ9zn5K6hvcVKGCuprbSkTRnIgI1S3RiLaEIS56eU2FkUYBJETx7-g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=antiporn_setup_17.2.1.11.exe

http://gsf-cf.softonic.com/536/315/.../file?SD_used=0&channel=WEB&fdh=no&id_file=25849&instance=softonic_es&type=PROGRAM&Expires=1447072305&Signature=HBr3HrTA~MDV0Cd97Q0ulmX2H6QlEYXFRxdupAQDUKcsmm1Y89~lOFr2Q3SR8u5wMfkwT05xHuUcUBZse2dgQ0ly9mv~hUeI0vXrQNCyPhD3Y1CsVIJw9u4OMqaKFtOU92ETy2e7JXnjbuAONO4vtZnkkFiJZUskMvxQBUjoh-s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=antiporn_setup_17.2.1.11.exe

http://anti-porn.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWsvkK2j9pBDo3G5Y1EjB6Cg9sMvPcMXiblW4xY/hJx/kWbdFYqgJskQcsjKarIU0fJF8VDzHH0sW0z2P6sV4rF/QQfCBpcpo66DgdJmZku0pvNFJOdxsRcOOFsdwJ6PTnLnydz9ZkO5s22DUju/ 9Xh uaPKwsqcoeiNjLbDel/8C92kiD1Elg XmSaX7WdL uWgK3r1IihK4inrgmUsIzPJ3TV4GoNUjAsLEKDLx0zvYoeaQwBXMMWuRK7LaCUugw42mSOHFJ5IOABdfESPRjb0YWiO 5G/.../HepUKUxz62pv3gXGrfZSSxZsspZBnpN3vGAnx2jXgXf5X6C9Yu VLKwMlKxdi6OwytvB6yzlEyo9vyy45u50KMo0F9lknapGmj2fz41iJd3b7UoFA0dyMa8jgNGGJAmQ7hwjqayqFromwd1QvIv1FDCmgwYJikkuAL YrciJmMgXScDQrzgBPrIJLgMVmLMhPkzByBfq51AmXqhIYpKIigrcIoeOFnhAsldxrbq3SZNPmGKcadQzxbbGJ VEbQW9YrDK5UpDb3oSqnym9lQJi8prrNr49uUDj4nDplOdD4q8F7PG6OWQqR2KwAPkoxr02TXvSxnAfuxwMAY60Os=

http://anti-porn.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWsvkK2j9pBDo3G5Y1EjB6Cg9sMvPcMXiblW4xY/hJx/kWbdFYqgJskQcsjKarIU0fJF8VDzHH0sW0z2P6sV4rF/QQfCBpcpo66DgdJmZku0pvNFJOdxsRcOOFsdwJ6PTnLnydz9ZkO5s22DUju/ 9Xh uaPKwsqcoeiNjLbDel/8C92kiD1Elg XmSaX7WdL uWgK3r1IihK4inrgmUsIzPJ3TV4GoNUjAsLEKDLx0zvYoeaQwBXMMWuRK7LaCUugxIhUv PmjfcG9IDMX2lNfha25a4y0Cq KB8exENnfnDM/KtsbRMU9OcFzPXlxMMNjL4XK2qYQk55jG5dl20StzRGg6vB6ICsHpGQN/.../db3vITwEbLcsWCYYDTLrD93vxpLAJmhEPMYft61Gtet1QTW4rVq9Q8bSIaSsqPJvtWDgVP4VK0YENDGhvW8aKP1tzoZmvWEG21jYhLB jbWJA1YcQLoKSZj94MbyBKE3tK4L23gKW8lqTs260dPZ32wLaIigrcIoeOFnhAsldxrbq3SZNPmGKcadQzxbbGJ VEbQW9YrDK5UpDb3oSqnym9lQJi8prrNr49uUDj4nDplOdD4q8F7PG6OWQqR2KwAPkoxr02TXvSxnAfuxwMAY60Os=

http://anti-porn.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWsvkK2j9pBDo3G5Y1EjB6Cg9sMvPcMXiblW4xY/hJx/kWbdFYqgJskQcsjKarIU0fJF8VDzHH0sW0z2P6sV4rF/QQfCBpcpo66DgdJmZku0pvNFJOdxsRcOOFsdwJ6PTnLnydz9ZkO5s22DUju/ 9Xh uaPKwsqcoeiNjLbDel/8C92kiD1Elg XmSaX7WdL uWgK3r1IihK4inrgmUsIzPJ3TV4GoNUjAsLEKDLx0zvYoeaQwBXMMWuRK7LaCUugzmksUPCJCR7QQX8eXWR mG3WcVesvjrS2z0PwhsUuyf52jt2N1q6Z63/2wZjf2Fqs nTtO8SkgI0Tt5pPg/.../19UTvOjnhM6EeF7HT1ByDrruBhXtI2n9x26m6hCcedoyiqUr9Cxm6Hw7QUHAAOGcnRV76o T7eAy2B fdMKvn IigrcIoeOFnhAsldxrbq3SZNPmGKcadQzxbbGJ VEbQW9YrDK5UpDb3oSqnym9lQJi8prrNr49uUDj4nDplOdD4q8F7PG6OWQqR2KwAPkoxr02TXvSxnAfuxwMAY60Os=

http://gsf-cf.softonic.com/536/315/.../file?SD_used=0&channel=WEB&fdh=no&id_file=25849&instance=softonic_es&type=PROGRAM&Expires=1439056641&Signature=TxenqxMu52TGRftgxr4iVIehbDjEvtPkNt5WBn9uq7PHLpfk0X2GLnBEtVrizkfK9cN9u89G1MJ4TLAebmIn2zhzp1LfAZjwZejPXiNo0i6sFTAg78jjnc-Ouy7CstUN7e97MMpZW~rLEiRQWpzIr0bxDWzC4cBWj-biu9Pd01U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=antiporn_setup_17.2.1.11.exe

http://gsf-cf.softonic.com/536/315/.../file?SD_used=0&channel=WEB&fdh=no&id_file=25849&instance=softonic_es&type=PROGRAM&Expires=1444868279&Signature=YqIaVgYi-0x9IBBSP6SXgqcV5HTZc8hlm0ES52l-6~pS-SSNqNxT~v9FzOCiPC6zL1M9pFQ3hR9lJPyeE418Zx6yQpfSpPs3jleR5yLKZTsKHK-Aa1nTnfNjagzoQ~p6bl3tjkGevrWP7iW~FWSm3dvw7thl6RRuWrzlbb0BAOA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=antiporn_setup_17.2.1.11.exe

http://gsf-cf.softonic.com/536/315/.../file?SD_used=0&channel=WEB&fdh=no&id_file=25849&instance=softonic_es&type=PROGRAM&Expires=1440480680&Signature=VAo1mbeY1GTNvaVW7RYZuHGWiz8WYfFr05IZIk4ZqtPYM-PdTfHwIm7D5WUt5eD-Bo1Td-X-R9EBLMmreCXy00TxKwfAet6iqGgdE30ip-eNHtS9pUFma9aaslQcwGww9zVjRMh6DkpMxwFV~9jDhBEtlk34NYwPUs1F5CIvF0w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=antiporn_setup_17.2.1.11.exe

http://gsf-cf.softonic.com/536/315/.../file?SD_used=0&channel=WEB&fdh=no&id_file=25849&instance=softonic_es&type=PROGRAM&Expires=1447638049&Signature=YPCTr9uQIHrsjzBK3E1z2PnqIRNCjkg-3nUtJvFarp6KyflIdi2mTBWOfgmmqMtr2u3UZ11mBuMNRP5kn3yx0~417LC679HVID5bxQ1q1yb5s0LfzkNuqOjU8SXYIv1U2TnbXPsN2b75uvPxnjiKfp1EjWqhsxscvhd319WyxIw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=antiporn_setup_17.2.1.11.exe

http://gsf-cf.softonic.com/536/315/.../file?SD_used=0&channel=WEB&fdh=no&id_file=25849&instance=softonic_es&type=PROGRAM&Expires=1454461781&Signature=JilURP9JcIjIKkuiMjaEB6~ScIXdZEC8ImMRwNjWxpoKdzg-wWsABXxEjdDfjo0h1nhNrZaiwLIliQb8c7egqB2Lpdmu75UJaX~nIjFJXmIJhNnnCgZiAnfE2pczmcskGby9PYbMdf7nvLJA3aYKdJDE2IWLAU680VEsMphXhAI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=antiporn_setup_17.2.1.11.exe

http://gsf-cf.softonic.com/536/315/.../file?SD_used=0&channel=WEB&fdh=no&id_file=25849&instance=softonic_es&type=PROGRAM&Expires=1446106898&Signature=e4PBm3rrB4qaDNXQxk6CJWg1D6shkvGY2cVLbcaHeFMTgKbyKZXw1kNn0OMevGAYKsSK1r50BSg9Qvv0OsA1lZATBcWNHlgdPG4yLmn1NvC8wqMOhSGXK8Evzok4lfNaaV9uYpkx23a7aQU9USTZ4aZWNxl95aZZ84Qh90S4tgU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=antiporn_setup_17.2.1.11.exe

Scan bbinst.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.