» blocks.exe
Overview
Analysis
File Details

blocks.exe

Blocks

Crystal Office Systems

File name:

blocks.exe

Publisher:

Crystal Office Systems (signed and verified)

Product:

Blocks

Version:

1.2.2.0

MD5:

cd1b40df89868449cab5006f3fd99738

SHA-1:

c1765ea130877d860d326d5ab7bb3147421e61d2

SHA-256:

8a61d6d995f186adb4fd3aa7f9b739aee12f7aae678e35b0c533b3fe3672844e

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/18/2024 11:20:56 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.ASPack

0.98/18011

Quick Heal

(Suspicious) - DNAScan

6.15.11.00

File size:

817.3 KB (836,944 bytes)

Product version:

1.22

Original file name:

blocks.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\blocks\blocks.exe

Digital Signature

Signed by:

Crystal Office Systems

Authority:

The USERTRUST Network

Valid from:

2/21/2011 12:00:00 AM

Valid to:

2/21/2012 11:59:59 PM

Subject:

CN=Crystal Office Systems, O=Crystal Office Systems, STREET="Kantemirovskaya street, 53-1-51", L=Moscow, S=RU, PostalCode=115477, C=RU

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

00C7DF5EC2BCD9DEA8C0BEBD21B0B003DD

File PE Metadata

Compilation timestamp:

3/3/2011 10:37:04 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.0

CTPH (ssdeep):

24576:mQW4AQc9+1bGBtlnaAiK/cRgOnmq9g6HTJShSZIHq:q4j1kL3cOU7m6zJShGsq

Entry address:

0x1000

Entry point:

68, 01, F0, 58, 00, E8, 01, 00, 00, 00, C3, C3, AA, FD, 6F, 35, 4E, 5C, FE, 79, 6E, BD, 35, E1, 87, 6D, 60, AC, CB, 6F, 86, 52, BD, C7, 3D, 83, 3F, 90, DB, 43, B4, 01, 1E, 44, 4E, CB, A6, 0B, B0, AB, 4C, BD, 3A, EE, 5D, BA, 07, E7, 51, EC, 56, E7, F2, 65, 53, 7B, D2, 28, 6C, DA, 53, 0A, 15, 43, 98, 28, 2B, 03, 5A, DB, 3C, A2, 9B, EC, BF, DD, 1C, AC, C6, 4A, 02, 7D, 75, FD, 54, E7, 41, DF, 9A, 6F, 98, 56, 71, CC, 1B, 46, 43, 34, 73, A5, FE, A5, 04, 26, 4B, E4, 23, 49, 4F, 83, 1F, EB, 21, 30, 41, 29, AE, EB... 
[+]

Entropy:

7.9543

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

592 KB (606,208 bytes)

Scan blocks.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.