home

{blocked}.exe

Spyglass

Clockwork Engine LLC

This is a setup and installation application. The file has been seen being downloaded from dl.boxcloud.com and multiple other hosts.
Publisher:
Clockwork Engine, LLC  (signed by Clockwork Engine LLC)

Product:
Spyglass

Description:
This installer database contains the logic and data required to install Spyglass.

Version:
1.2.0

MD5:
7ada14b1c0fb2cd2867ef80c771fdc39

SHA-1:
19273d976a7e1d7553abfef9fc684569f97bc3ea

SHA-256:
5ba5e1c17e5ff7cd9cea0adbe95eb6603ee9472711027705639a512fcaae321a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 8:14:41 PM UTC  (today)

File size:
6 MB (6,305,632 bytes)

Product version:
1.2.0

Copyright:
Copyright (C) Clockwork Engine, LLC

Original file name:
Spyglass_Installer_1.2.0.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Clockwork Engine LLC

Authority:
VeriSign, Inc.

Valid from:
10/8/2012 2:00:00 AM

Valid to:
10/9/2013 1:59:59 AM

Subject:
CN=Clockwork Engine LLC, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Clockwork Engine LLC, L=Meridian, S=Idaho, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
29A5A0963EADCC410D729F4DDFD9A538

File PE Metadata
Compilation timestamp:
10/18/2012 12:04:11 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:0RqsnSnewFJSe5ev9MqrFpcAGerZpQ71IRLjS2VipAmJjM+jX4KDTsx:L5XFR5q9Mqrc/eXQ7iVvV5mhX4X

Entry address:
0xAB509

Entry point:
E8, 25, B9, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, F0, 33, DB, 3B, F3, 75, 1E, E8, CF, 44, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, CB, EB, FF, FF, 83, C4, 14, 8B, C6, E9, C2, 00, 00, 00, 57, 39, 5D, 0C, 77, 1E, E8, AB, 44, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, A7, EB, FF, FF, 83, C4, 14, 8B, C6, E9, 9D, 00, 00, 00, 33, C0, 39, 5D, 14, 66, 89, 06, 0F, 95, C0, 40, 39, 45, 0C, 77, 09, E8, 7C, 44, 00, 00, 6A, 22, EB, CF, 8B, 45, 10, 83, C0, FE, 83, F8, 22, 77...
 
[+]

Code size:
884.5 KB (905,728 bytes)

The file {blocked}.exe has been seen being distributed by the following 11 URLs.

https://dl.boxcloud.com/bc/4/.../2l1qDSvp2BK4hA7qnSx510NgM9E9TaGAJfyYtowJxccetKgpbvD4QjZI-Amn9RxPL5OGUc1Q9rtU7IK2q--Lwp5Z7-cVA5mQ8E-GnKHgMjW5xLtg03-3tAe3kV_UyzZU9JHQBFmyDm25PVRPQGOiwFrFvZvVKYTksDae3Kk-Lhv-SRKD0YFxvpKRM0_832ms9q6nWWJlghQPpyOBQnrYoPyuhaOZhaQVoBdGf5MdWufzU2HdoEqyAUgTE8rBl8mJxkMTQf4RLD7u3co9VkFmf4tN0daErxlrf6lzy8pXb3vgdb9vv5DCniL9ms5FVbIQUlnfpeaGi1Z6BA4AaWMBkO5mUQR2ayIqqykdlM0f4a6Qh8e83CGVthD7JMqBlcq2kyO0BRYQ5dwduHzSMmBeZQbc1HQl2x4Vk8CpffPenspfYz41fLFBOq3IHg-VycV9QoNb-BXakUi28EZEvVp2orfhxdBVaWCgDnQqWStXD9-SOhZyN-f6aHocoruvQ6JdxAlLRne6SPURmOMGG4yS4xgGrtbTLQwk3R8u0JAZVz8BgqPB0lh5lm6xZr-bT96S_2pkINbS6fIYLIBWDLFdCj33WIjKXdVDqXFdnSnOMV_cMhEvXBdxlU_MyOejhLq5YPyUetLOdAOtoRMsCV7KMEPfEw2-QRo7Ob656cTo4Bg9lv5RKI8JyLxhOgxAIveVmO7m0dUbnB6ggdgNYO4-XTUDN_WDyCIdZTF0RW_ccoKaDbt4ImobpDf6qTnPSpU2prdTFzzLmyOEHh1-JgmSQVKgndPB19nDMeaj58AD2gIH6ft4C6byHsIaNxMAJLXjV5fAu6UgMkkSNbDCa1Vr5LLdfmcsqyP0a6YYEsakmPxCCfhL6UmiARsiGmEZTVbo1dgN-C_ZeY8tDRfGtJq_hOoikaeAOevdI2F49rVULA

https://dl.boxcloud.com/bc/4/.../KDPXhQpfn0h9wQ9v8QK-hIp7FQFaZLOKy7lYk8W4X8rn3YXx5Oz56z69ohmtgMfxeJZNb7pamf32y4nafHvh9ptGDrrPrxPBsenH1grKXL6VoZ_mabO94EMMpSIPQuXrA3aYWF7f-cbamIn7r07KiJqE7DHhjo99UbnKEgB_RU2v-3KRcX28124ZJjn1J1Q1kRDNXg9caZW3cHw6qnbU4IO3d33D8BvD0erI32HPONwMndmwVBaHZIxEWO0BUyvzsH5v8w3od2Jehx0E4Xl40V0s7Z2z5KIeRzDMeYghK44O7ZF02h9GG_I5Xy-zKJSxfBhJUfR6G_N6nCRNGEAGE1lbC486Bp_4UFXTcXyAqiKJfvEoyaTMZLl7W6yZ2Yh5_qnpaRF2SUPNccezoK78Xfl0CeC--OyncIFNbDPsr6z2BXzPWYkHtcN9kku6X5r-fePxF98u7CXf1fmx_WCC2GUhdpAGboYlkYLVH8PuYBF5B6z2dD0CIoKcxrjK1-LCd-g-jcca4zZDz1xZPF3qqwPwuAznCnigtuBUWzpDl9fKnH9rb1ERmoRmAfpxx1-NbOQhvHPLSSvnhh6HFfcWTTZpEruTrkHM8uIp_KJH86tHbQW3rG54HsItnAOle6TWC0uudfob_SE7W0d73fOsGY_jkjCTZxSOv_M53asEda2I41QZS8zaJHhb0LV8XrW2dNdjmSHD-rqBVw0FRX4DeRr-S7NZybJYrNk-7vxXhw3rj8mwY9kv-TtVi3Dl25bizNPDvv-lEoPI0H9gbfWO7oaueAqWG0Myuz_TDbWb1ePn4B7esfq-fP9pNIi0uv8S6Gma5kt97B_e-2y8hisy0TlilLLyxXdaR0-7jz0UMAVsdQg5yY1420fjNixNWi3NCGRtZFHwUxjiB0HYstW3YOa64Tr-MalTG1mgS09CvW

https://dl.boxcloud.com/bc/4/.../_VJN5Ur-0XQKSSARIMhTyQqK00_cy9j96V8AsrbKdFnDU_z_cfd70FSLKTGTpgJUhL2ygEx4kVX-maOfo-jcSCRVmViIFrHuZl4mjieassNCKJiERXCL1m7ZLqwpvtprROXXV0KGw6tSNlBI1qZ-ubvj5iifjUI-FujGNrqkDn0HjVOGqNPY7PY2Biq6-pg5HDI7IQRpjxtnSqsfO9YMSVxbQlwwjVOlubyeu6NFixLWRrmQDzpY6MuYjOPXHrDlRsicOJWBZKHXzzCk8JB2wm3UljT3-rN9o8UyOEsBTSIjHYQYGrq0_ZNmHlVPPvYh53Yaa0vDHj_R28v37uLRfzrHgnc-qh6lGeBgwQyaUmyo6dUSrLrsE7z9Ik8fCYWMncnsWphsvVVyiop2kH8ua8EJ7_GwvCqMPHUnaHcIiedEuY3k_Dnu_evHeNYO7o5AM8JSztkmHRFM07P9avOs8QWEE8wnD46q3yAB6qlWxSFvkCsTNCGPeEMOEkhbjf6ptk7t3yg4MPYsHPwdBANL-mlBdEw8nQ9wOqmrolAQou_GBUPRRuI6iC7x6i_SxUFyq2FealzBYI1iTrx24Nze9bky7jcCW_xUB06e9UDJ5V4TXD8nDxZBShNTA67x6cLCqCy0rhQ3lG1bvatiQKVYEBp05-_T83G6N8ConzMX_WBmNa-FhZLexz33SjEk3YCOQEaCvhviCAHV7cEMdUtDb6lyApZcBcv0B8_daMQuD1Pi6u6JY2YXxhj2OI27xk2Nwyn6tv5CFAtDRGlExvXUUU9mCfTzSv7dmh4neal4vcr0lByiOQJSgrVmyjltmWF2y3W4VxqfsIydAGcuw5-l_-f_1uWO-lw5fKnSZDiTd2pP2-5sd0AaDsEGrlS3lA1yD14EY53q2EzJbjv1Tm1tXB1KADc4NpHRc8VpmEqOuR

https://dl.boxcloud.com/bc/4/.../csxYQtdRsiO2hmYFCwg2SquGKDUKvWCuWuPo5WhfMtmqaW_gNtimsP3FzfQyNm5Gs9bB6kzW6nvuD0GnW_c-rAJaLGpa_UAj-re4PGd0zAO-LS0RXF0Vu8Okuyp7HiP0yNS4zXS89KTcEPZp1HYjQnCgDGe7psk2tkbsTmgVA5frAzGZFxlSkq98tFQxiBoZTAiPNhq6y1z7C8hcy8o7IzBdVLJ02HhwQgabvB8TkozfG13zZvx03CRbVGE-lm6OyoI7LvOvOGKoVQwMRo9oAeNLYRz7jGRxplUlzI-u4fqrHCHNIRmKZXeMmYi6ffR3SQ1lYLNhAur-WCLM0jyWE5Y0Ndikg1eaEJvKqBteb5v8tp3BxyL35KJ0PVwovbicQPsdhCSLnc6T_ugZjJmtjNSEwrtq2uoy8SYkBkYTx_A39hJS9ZPnE8nLTDwEnNK4n5MBplB6mp1rXkuIX9iXoeHSerbyj7oLJoYK_5hVmmPxmkwiIJSqOEfTSUmSUMCsgWMnVG_jIE3A4LABLAENIJ1e2E5hznlNH8dzHoPQoncIsJKtRpKsauaojYJHdddtNm5EXpGtA_U5qxGX_ryLLZdvF-PsjRS3N5it7ea35juy0zhSnRov-ZJswO7W_xSwvsv-zLAE6EEXisufd6rgtWNEbb_LwheyvleeTAMO9N7Kp8_Jyph7LpIQns8iPWZ0kdKfc7-IRYUbv-zjszf43hc9Khp1Rsmh3sdG1B_-eEWiUuV0ozpc9M1iH7s7md9ujbPd0DJRAjp9ARDNOX054WoVIh8rCQtl_dZiV5r5wUwqL_SobIIRCNbAX1KuaT42JOGmrgQnVTS6Wjc5LrCu3qPCYiYxadHu7m5Y05VqVqlS9476xE-5CdhJHxKf09EqF9fW1sXtji1jMDa0Z3FNCxrbAwvNZJa0quMk_VEsRQ

https://dl.boxcloud.com/bc/3/adcb14dd38bd89936cd4625f4fb8a84b/.../

https://dl.boxcloud.com/bc/4/6e5846d008855c73139063272e52ca7a/.../

http://cl.ly/1m1O220P2B31/.../Spyglass_Installer_1.2.0.exe

http://api.cld.me/1m1O220P2B31/.../Spyglass_Installer_1.2.0.exe

https://s3.amazonaws.com/f.cl.ly/items/.../Spyglass_Installer_1.2.0.exe

https://app.box.com/index.php?rm=box_download_shared_file&shared_name=d9u324ccdtog27lk581t&file_id=f_13035477947

https://dl.dropboxusercontent.com/u/.../SpyglassUpdates/Spyglass_Installer_1.2.0.exe

Scan {blocked}.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.