home

filelock.exe

MD5:
b797839cc323e3b8a82d10a9601f8404

SHA-1:
ab3b9ec117944dda4d095b959f29917049cea567

SHA-256:
799707c8c1b81e02d863aa6f9dbc652c1e39210723ff59e97eebe4ba00d5a22c

Scanner detections:
5 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/28/2024 4:56:37 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Suspicious
7.1.1

Avira AntiVirus
TR/Crypt.XPACK.Gen2
7.11.106.104

Bkav FE
HW32.Laneul
1.3.0.4246

Comodo Security
UnclassifiedMalware
17074

IKARUS anti.virus
Trojan.Crypt
t3scan.2.0.127

File size:
15.7 MB (16,494,592 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\gilisoft\file lock pro\filelock.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

CTPH (ssdeep):
49152:h9sjHcgkn48IzUYK3TsZzB7HU9gr2nNUmsnTFty28anVPXIdXjIWH/qeeI:heon48CdlB7H52NUvhtXHVPXYzI+qee

Entry address:
0xF1B0C

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, A4, 08, 4F, 00, E8, CF, 51, F1, FF, 8B, 1D, 7C, 59, 4F, 00, 8B, 03, E8, 9A, F4, F7, FF, 8B, 0D, FC, 58, 4F, 00, 8B, 03, 8B, 15, DC, 42, 4D, 00, E8, 9F, F4, F7, FF, 8B, 0D, 20, 5B, 4F, 00, 8B, 03, 8B, 15, 80, 1B, 4D, 00, E8, 8C, F4, F7, FF, 8B, 0D, 40, 57, 4F, 00, 8B, 03, 8B, 15, 4C, FA, 4E, 00, E8, 79, F4, F7, FF, 8B, 0D, 14, 58, 4F, 00, 8B, 03, 8B, 15, 64, A9, 4C, 00, E8, 66, F4, F7, FF, 8B, 0D, E4, 5A, 4F, 00, 8B, 03, 8B, 15, F0, 28, 4D, 00, E8, 53, F4, F7, FF, 8B, 0D, BC...
 
[+]

Entropy:
6.1889

Developed / compiled with:
Microsoft Visual C++

Code size:
960 KB (983,040 bytes)

Scan filelock.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.