home

EZBlocker.exe

EZBlocker

http://www.ericzhang.me

Publisher:
http://www.ericzhang.me

Product:
EZBlocker

Version:
1.2.0.0

MD5:
4f75990650802be00d698b9c2d7c3dca

SHA-1:
f932bcb69670681bcabb87e7a817f172bf3ff8cc

SHA-256:
a5c3c274308f74b2e149e88fed2813ae221ce6f3bbd7f9eebf858767dc6533ea

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 3:26:49 PM UTC  (today)

File size:
1.7 MB (1,762,304 bytes)

Product version:
1.2.0.0

Copyright:
Copyright © 2012-2014 Eric Zhang

Original file name:
EZBlocker.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\ezblocker.exe

File PE Metadata
Compilation timestamp:
1/10/2014 12:06:43 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:6Rr1FZihw6JRr1FZihw68yYsdmmcAQrZLG5qqZeT3Rr1FZihw6:6RrM3JRrM3/LcAQrZi5I3RrM3

Entry address:
0x145C4E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.6747

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.3 MB (1,326,592 bytes)

The file EZBlocker.exe has been seen being distributed by the following 4 URLs.

https://s3.amazonaws.com/github-cloud/releases/.../edf20a66-799b-11e3-99b4-faacca979109.exe

https://github.com/Xeroday/Spotify-Ad-Blocker/releases/download/.../EZBlocker.exe

http://www.ericzhang.me/dl/.../EZBlocker.php

http://www.ericzhang.me/.../?file=EZBlocker.php

Scan EZBlocker.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.