home

locker.exe

ID Security Suite

Cristina Mailat

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘ID USB Lock Key’.
Publisher:
Fastlink2  (signed by Cristina Mailat)

Product:
ID Security Suite

Version:
1.2.2.0

MD5:
33b48f4987cb9f013a4819dd66f1c1e0

SHA-1:
2382621eac6fa3a189f0e71c1a81140f3617b950

SHA-256:
e192bf78be7b49c86c915312b735f4a8f0f4329e717f6da34529e8ca525c2015

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:18:20 AM UTC  (today)

File size:
494.2 KB (506,056 bytes)

Product version:
1.2.2.0

Copyright:
Copyright © Fastlink2

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\id security suite\id usb lock key\locker.exe

Digital Signature
Signed by:
Cristina Mailat

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
2/28/2007 4:33:52 PM

Valid to:
2/28/2008 4:33:52 PM

Subject:
CN=Cristina Mailat, OU=Fastlink2, O=Cristina Mailat, L=Leverkusen, S=NRW, C=DE

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
2B9F5FFDF31736A6BD504B4D0E734A58

File PE Metadata
Compilation timestamp:
6/20/1992 2:52:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:woG/Z65/d4hvNDdKLgmIj1zhqJzWbisxp355yjuv7uDZrCW3e0dZfFgCZTdsmnEt:VuY5/d4h1DdAIj19qci1dTdxGmnO9qn

Entry address:
0x1000

Entry point:
68, 01, 90, 49, 00, E8, 01, 00, 00, 00, C3, C3, 0D, AB, BA, CC, 7F, 63, A3, 5B, 4B, 3E, BF, F1, BE, 26, A6, E8, 7D, 2A, B6, 1A, 4C, E0, 1B, 17, 6A, A5, 41, 84, 73, 19, 69, 7C, DA, 6C, 2A, 1B, CD, 5E, 5D, 04, D8, A7, 18, 52, B7, 72, 37, BB, 3C, 37, 32, 86, A9, 0C, BE, 93, FF, BB, 1F, 63, 41, 35, F0, CF, 08, 79, 57, 89, 3C, 05, AA, F6, 03, 25, 93, 3B, AE, 1F, 2C, 50, 91, 89, 1A, F9, 64, 27, C9, A6, 57, A0, DE, 27, B9, 7A, E3, A6, 9E, A3, 36, 33, A7, 2F, A3, BE, 5A, 68, 6D, EC, 5B, 93, 81, 6A, 60, 69, 38, 25...
 
[+]

Entropy:
7.8118

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
343 KB (351,232 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ID USB Lock Key

Command:
C:\Program Files\id security suite\id usb lock key\locker.exe


Scan locker.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.