» FLCDLOCK.EXE
Overview
Analysis
File Details
Behaviors (1)

FLCDLOCK.EXE

Device Access Manager

Hewlett-Packard Limited

It runs as a separate (within the context of its own process) windows Service named “HP ProtectTools Device Locking / Auditing”.

File name:

FLCDLOCK.EXE

Publisher:

Hewlett-Packard Ltd (signed by Hewlett-Packard Limited)

Product:

Device Access Manager

Version:

3, 0, 0, 1

MD5:

81822519c4cbcd0bd4119c10e5a5de52

SHA-1:

be131d0ca9adc03767b68695c3997cc601c2243e

SHA-256:

6d311237126687b4ab76e0f189370c6d0f2eb1277259e260b438261efc0d4602

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 11:43:28 PM UTC (a few moments ago)

File size:

341.2 KB (349,432 bytes)

Product version:

3, 0, 0, 3

Original file name:

FLCDLOCK.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Windows\System32\flcdlock.exe

Digital Signature

Signed by:

Hewlett-Packard Limited

Authority:

VeriSign, Inc.

Valid from:

4/7/2008 7:00:00 PM

Valid to:

4/8/2009 6:59:59 PM

Subject:

CN=Hewlett-Packard Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Hewlett-Packard Limited, S=Berkshire, C=GB

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5987A1E506E665F879BC1002D483CCF1

File PE Metadata

Compilation timestamp:

4/21/2008 5:45:19 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

8.0

CTPH (ssdeep):

3072:nrd/HmaD0w1xd+1c7abhC/QY4391vpAjhy96iDrwXyOWltfkbxZQPPELiudf9Ctw:gaD0wTBubhulC6iD3SboPmAr/rmfnzl

Entry address:

0x19AF7

Entry point:

E8, E8, B8, 00, 00, E9, 40, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 07, 83, F8, FE, 74, 0D, 8B, 4F, 04, 03, CE, 33, 0C, 30, E8, C6, D6, FF, FF, 8B, 4F, 0C, 8B, 47, 08, 03, CE, 33, 0C, 30, E9, B6, D6, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 83, EC, 14, 53, 8B, 5C, 24, 20, 55, 56, 8B, 73, 08, 33, 35, 0C, 13, 45, 00, 57, 8B, 06, 83, F8, FE, C6, 44, 24, 13, 00, C7, 44, 24, 18, 01, 00, 00, 00, 8D, 7B, 10, 74, 0D, 8B, 4E, 04, 03, CF, 33, 0C, 38, E8, 72, D6, FF... 
[+]

Entropy:

6.4543

Code size:

272 KB (278,528 bytes)

Service

Display name:

HP ProtectTools Device Locking / Auditing

Service name:

FLCDLOCK

Description:

Used by HP ProtectTools to lock devices and audit access to drives

Type:

Win32OwnProcess

Depends on:

rpcss

Scan FLCDLOCK.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.