home

blekkoinstallchecker.exe

Blekko, Inc.

The application blekkoinstallchecker.exe by Blekko has been detected as adware by 4 anti-malware scanners. It is also typically executed from the user's temporary directory.
Publisher:
Blekko, Inc.  (signed and verified)

MD5:
a24e3709729c88fdf44a8a40e540990b

SHA-1:
127c8b5f14be0dcf7dd5e9beba89635a0394c41d

SHA-256:
4f5f4ba1af5133115f5c3b466ed0cb5071e6a30d6dae5fa71785d0ff6293b61c

Scanner detections:
4 / 68

Status:
Adware

Analysis date:
4/19/2024 11:24:58 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Dr.Web
Adware.Downware.663
9.0.1.035

Malwarebytes
Adware.Downware
v2014.02.04.12

Reason Heuristics
PUP.Blekko.U
14.7.17.10

Trend Micro House Call
TROJ_GEN.F47V0120
7.2.35

File size:
221.3 KB (226,592 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\blekkoinstallchecker.exe

Digital Signature
Signed by:
Blekko, Inc.

Authority:
DigiCert Inc

Valid from:
4/4/2012 4:30:00 AM

Valid to:
6/10/2015 4:30:00 PM

Subject:
CN="Blekko, Inc.", O="Blekko, Inc.", L=Redwood City, S=California, C=US

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
04A6DE4CBB85009FDEB5922F181C5382

File PE Metadata
Compilation timestamp:
4/10/2012 10:47:56 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:ZFT9/Q2F8XYdZ+Fyh8yG/JXgdhyZO9aUe0oFZIiZJSFTqVJ6V5NNwiSdVVj:BQ2FhZ+FyDGxXgdhys9avNcYQTRVNwi8

Entry address:
0x104EC

Entry point:
E8, 89, 7D, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 66, 8B, 55, 0C, EB, 07, 66, 3B, CA, 74, 11, 40, 40, 0F, B7, 08, 66, 85, C9, 75, F1, 66, 39, 10, 74, 02, 33, C0, 5D, C3, 6A, 10, 68, 80, B3, 42, 00, E8, 84, 22, 00, 00, 8B, 5D, 08, 85, DB, 75, 0E, FF, 75, 0C, E8, A1, F8, FF, FF, 59, E9, CC, 01, 00, 00, 8B, 75, 0C, 85, F6, 75, 0C, 53, E8, 6D, FD, FF, FF, 59, E9, B7, 01, 00, 00, 83, 3D, E0, 3D, 43, 00, 03, 0F, 85, 93, 01, 00, 00, 33, FF, 89, 7D, E4, 83, FE, E0, 0F, 87, 8A, 01, 00, 00, 6A...
 
[+]

Entropy:
6.1948

Code size:
143 KB (146,432 bytes)

Remove blekkoinstallchecker.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.