home

00bbmain.072

BlackBerry Service

Research In Motion Limited

Publisher:
Research In Motion Limited  (signed and verified)

Product:
BlackBerry Service

Version:
4, 0, 0, 0

MD5:
52814b5af41712aad10bb99487447bc9

SHA-1:
cfba9d30602b487955971183ea827741e27bb481

SHA-256:
9a6b8e0ca8a589dc751926a5e6ad42450f02f46483efe12b1ba476410a0ceed9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 2:54:02 AM UTC  (today)

File size:
1.8 MB (1,876,032 bytes)

Product version:
4, 0, 0, 106

Copyright:
© 1997 - 2008 Research In Motion Limited. All rights reserved.

Original file name:
BBMain.exe

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\00bbmain.072

Digital Signature
Signed by:
Research In Motion Limited

Authority:
Microsoft Corporation

Valid from:
11/27/2008 5:30:00 AM

Valid to:
11/28/2018 5:29:59 AM

Subject:
CN=Research In Motion Limited, OU=BlackBerry Service 4.0.0.106, OU=c5e8da32cf16e51a48a4b7cbf67b417a, O=Research In Motion Limited, L=Waterloo, S=Ontario, C=CA

Issuer:
CN=VeriSign Authorized Code Signing Privileged CA for Microsoft, OU=Compatible with Microsoft Windows Powered Mobile Devices, O=Microsoft Corporation, C=US

Serial number:
3AC6F13F42C100978C631A1FC9C0D68B

File PE Metadata
Compilation timestamp:
11/25/2008 2:45:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:

Linker version:
8.0

CTPH (ssdeep):
24576:oAGGHWLR97QneUkjSAqDFNvWUjJluDNnDlujZARD48KVnpcSZcRkyi:onGOPkWUjJMAjKRMLVnvcRkyi

Entry address:
0x15FDD0

Entry point:
0D, C0, A0, E1, F0, 58, 2D, E9, 1C, B0, 8D, E2, 04, D0, 4D, E2, 03, 40, A0, E1, 02, 50, A0, E1, 01, 60, A0, E1, 00, 70, A0, E1, 13, 00, 00, EB, 04, 30, A0, E1, 05, 20, A0, E1, 06, 10, A0, E1, 07, 00, A0, E1, 8E, 8A, FA, EB, 00, 40, A0, E1, 20, 40, 0B, E5, 01, 00, 00, EA, 00, 40, A0, E1, 65, 00, 00, EB, 04, 00, A0, E1, 63, 00, 00, EB, F0, 68, 1B, E9, 1E, FF, 2F, E1, 04, E0, 2D, E5, 00, 30, 90, E5, 00, 10, A0, E1, 00, 00, 93, E5, 8D, 48, 00, EB, 04, F0, 9D, E4, 30, 40, 2D, E9, 5C, 40, 9F, E5, 54, 50, 9F, E5...
 
[+]

Entropy:
6.1838

Code size:
1.5 MB (1,521,664 bytes)

Scan 00bbmain.072 - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.