home

flockbox.exe

FSPro Labs

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘flockbox’.
Publisher:
FSPro Labs  (signed and verified)

Description:
My Lockbox

Version:
1.2.1.61

MD5:
6b5be00bc0b6c68abd4157923a968aca

SHA-1:
5e347c69b400729dca41c7de6f41643048ced47f

SHA-256:
2a7597348ef36250a1aefb75b772eff1178ae569febeb68b1e05861fdcc54c63

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 9:37:03 AM UTC  (today)

File size:
1 MB (1,071,472 bytes)

Product version:
1.2

Copyright:
Copyright © 2006-2007 FSPro Labs

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\my lockbox\flockbox.exe

Digital Signature
Signed by:
FSPro Labs

Authority:
The USERTRUST Network

Valid from:
1/21/2007 7:00:00 AM

Valid to:
1/22/2008 6:59:59 AM

Subject:
CN=FSPro Labs, O=FSPro Labs, STREET=20-6 P.Toliatti st. apt. 20, L=Taganrog, S=RO, PostalCode=347931, C=RU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
0080BFAF635421F01F5FBF784912F11AE7

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:dfH1qsdW8+adhSNvhbLM4AWqrHqL8cpsm+eGbR+Q7eNj2KLvs6KLvsF40XyKPAW:d1lI8NCh/Se4IYeGbEQ74j3C84eT

Entry address:
0x1000

Entry point:
68, 01, 00, 5B, 00, E8, 01, 00, 00, 00, C3, C3, FD, 4C, D0, 3C, 49, 70, 8F, 02, 23, F5, 3D, 3C, 7C, 2F, 87, 56, 56, E0, C5, 40, 84, D2, A6, 80, 63, B9, 13, 4C, 83, 2C, 6C, AC, E0, 77, 16, 70, FE, 3A, 19, 18, 58, E1, 90, 76, A9, D6, 21, 63, F2, DA, E0, 33, 8D, DD, 94, 7E, CB, 2C, D0, DD, 63, 18, 7B, 2C, 03, 1B, 35, B2, A3, 86, FB, 1F, A7, 12, 18, 68, 19, E7, C8, EF, C4, 00, FF, F4, 5F, B1, 00, 23, FC, 90, A0, 91, FB, 0F, C3, 2A, 8C, E1, 65, 77, 50, 40, 00, 98, ED, EF, 88, 73, 8B, BD, D2, CF, 70, 75, 6F, 25...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.1 MB (1,160,704 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
flockbox

Command:
C:\Program Files\my lockbox\flockbox.exe \a


Scan flockbox.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.