Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6, 1, 0, 0 50.00%
6, 0, 0, 11 16.67%
6, 0, 0, 9 33.33%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
GetSidIdentifierAuthority, IsValidSid, LookupAccountSidA, LookupPrivilegeNameA, GetExplicitEntriesFromAclA, EqualSid, AdjustTokenGroups, CreateRestrictedToken, GetAce, LookupAccountNameW, ConvertStringSidToSidW, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, CopySid, GetSidSubAuthorityCount, GetTokenInformation, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, ConvertSidToStringSidW, DuplicateTokenEx, RegNotifyChangeKeyValue, OpenThreadToken, GetSecurityDescriptorLength, IsValidSecurityDescriptor, SetFileSecurityW, RegEnumKeyExW, StartServiceW, ConvertStringSecurityDescriptorToSecurityDescriptorW, AccessCheck, GetSidSubAuthority, GetLengthSid, GetSecurityDescriptorDacl, SetSecurityInfo, OpenServiceW, DeleteService, OpenSCManagerW, CreateServiceW, CloseServiceHandle, QueryServiceStatus, ControlService, SetServiceStatus, RegCreateKeyExW, ReportEventW, RegisterEventSourceA, RegisterEventSourceW, DeregisterEventSource, RegOpenKeyExW, RegCloseKey, RegSetValueExW, RegQueryValueExW, IsTokenRestricted
kernel32.dll
SetEnvironmentVariableW, GetTimeZoneInformation, SetStdHandle, FlushFileBuffers, GetLocaleInfoW, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetEndOfFile, ReadFile, ResetEvent, SetEnvironmentVariableA, CompareStringW, CompareStringA, IsValidLocale, EnumSystemLocalesA, GetLocaleInfoA, GetUserDefaultLCID, GetDateFormatA, GetTimeFormatA, GetStringTypeW, GetStringTypeA, LoadLibraryA, InterlockedExchange, SetConsoleCtrlHandler, GetConsoleMode, GetConsoleCP, SetFilePointer, HeapFree, GetProcessHeap, GetLastError, InterlockedDecrement, LocalFree, CloseHandle, OutputDebugStringA, SetLastError, GetModuleFileNameW, FreeLibrary, lstrcpyA, GetProcAddress, LoadLibraryW, InterlockedIncrement, lstrlenW, InitializeCriticalSection, DeleteCriticalSection, GetDriveTypeW, GetVolumeInformationW, GetLogicalDrives, SetEvent, Sleep, FormatMessageW, DeviceIoControl, CreateFileW, WaitForSingleObject, VerifyVersionInfoW, VerSetConditionMask, CreateEventW, EnterCriticalSection, LeaveCriticalSection, GetCurrentThread, ExitThread, WaitForMultipleObjects, QueryDosDeviceW, GetSystemDirectoryW, GetModuleHandleW, TerminateThread, OpenEventW, CreateThread, GetCurrentProcess, GetCommandLineW, lstrcmpiA, lstrlenA, GetExitCodeThread, MultiByteToWideChar, ResumeThread, OutputDebugStringW, WinExec, LocalAlloc, GetUserDefaultUILanguage, ProcessIdToSessionId, GetCurrentProcessId, GetTickCount, GetOverlappedResult, SizeofResource, LockResource, LoadResource, FindResourceW, FindResourceExW, lstrcpyW, WideCharToMultiByte, RtlUnwind, GetSystemTimeAsFileTime, RaiseException, HeapAlloc, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCurrentThreadId, GetLocalTime, GetCommandLineA, GetVersionExA, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, HeapDestroy, HeapCreate, VirtualFree, FatalAppExitA, VirtualAlloc, HeapReAlloc, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, LCMapStringA, LCMapStringW, HeapSize, SetHandleCount, GetFileType, GetStartupInfoA, QueryPerformanceCounter, CreateFileA
netapi32.dll
DsGetDcNameW, NetApiBufferFree
ole32.dll
CoTaskMemFree, StringFromCLSID, CoUninitialize, CoInitializeEx, CoSetProxyBlanket, CoInitializeSecurity, CoCreateInstance
rpcrt4.dll
NdrServerCall2, RpcServerUseProtseqEpA, RpcServerRegisterIf, RpcMgmtStopServerListening, RpcServerListen, RpcImpersonateClient, RpcRevertToSelf
secur32.dll
GetComputerObjectNameW
setupapi.dll
SetupDiChangeState, SetupDiGetClassDevsW, SetupDiEnumDeviceInterfaces, SetupDiGetDeviceInterfaceDetailW, CM_Get_Device_IDW, CM_Get_Parent, SetupDiGetDeviceRegistryPropertyW, SetupDiDestroyDeviceInfoList, SetupDiSetClassInstallParamsW, CM_Get_DevNode_Status, SetupDiOpenClassRegKeyExW, SetupDiGetClassDescriptionW
shell32.dll
ShellExecuteExW
user32.dll
PostQuitMessage, EndPaint, wsprintfW, KillTimer, SetTimer, BeginPaint, UpdateWindow, ShowWindow, CreateWindowExW, RegisterClassExW, LoadCursorW, UnregisterClassW, DestroyWindow, DispatchMessageW, GetMessageW, PostMessageW, DefWindowProcW, UnregisterClassA
wtsapi32.dll
WTSEnumerateSessionsW, WTSQuerySessionInformationW, WTSFreeMemory

FLCDLOCK.exe

HP ProtectTools Device Access Manager by Hewlett-Packard Company (Signed)

Remove FLCDLOCK.exe
Version:   6, 1, 0, 0
MD5:   a814979613c50457ed25fd60c872ebbc
SHA1:   3ea5b2d45387ef38daf96e60e7e1d767277e6dbf

What is FLCDLOCK.exe?

HP ProtectTools provides Device Access Manager for HP ProtectTools for the supported notebook models and operating systems. Device Access Manager for HP ProtectTools enables administrators to control access to the devices on a system, and to protect against unauthorized access.

Overview

flcdlock.exe runs as a service under the name FLCDLOCK (FLCDLOCK) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Hewlett-Packard Company which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:flcdlock.exe
Publisher:Hewlett-Packard Company
Product name:HP ProtectTools Device Access Manager
Typical file path:C:\Windows\System32\flcdlock.exe
File version:6, 1, 0, 0
Size:465.55 KB (476,728 bytes)
Certificate
Issued to:Hewlett-Packard Company
Authority (CA):VeriSign
Digital DNA
PE subsystem:Windows Console
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • FLCDLOCK
  • 'FLCDLOCK' (HP ProtectTools Device Locking / Auditing)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00015076%
0.028634%
Kernel CPU:0.00007095%
0.013761%
User CPU:0.00007980%
0.014873%
Kernel CPU time:7,441 ms/min
100,923,805ms/min
Memory
Private memory:6.76 MB
21.59 MB
Private (maximum):12.25 MB
Private (minimum):10.71 MB
Non-paged memory:6.76 MB
21.59 MB
Virtual memory:72.41 MB
140.96 MB
Virtual memory (peak):79.2 MB
169.69 MB
Working set:10.72 MB
18.61 MB
Working set (peak):12.25 MB
37.95 MB
Resource allocations
Threads:13
12
Handles:227
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:C:\Windows\System32\flcdlock.exe
Owner:SYSTEM
Windows Service
Service name:FLCDLOCK
Display name:FLCDLOCK
Description:“Used by HP ProtectTools to lock devices and audit access to drives”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
sechost.dll
Total CPU:0.00325237%
0.272967%
Kernel CPU:0.00241920%
0.107585%
User CPU:0.00083317%
0.165382%
CPU cycles:72,730/sec
5,741,424/sec
Memory:100 KB
1.16 MB
ole32.dll
Total CPU:0.00296129%
Kernel CPU:0.00221846%
User CPU:0.00074283%
CPU cycles:71,325/sec
Memory:1.36 MB
flcdlock.exe (main module)
Total CPU:0.00004350%
Kernel CPU:0.00004015%
User CPU:0.00000335%
CPU cycles:78,590/sec
Memory:472 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 50.00%
Windows 7 Professional 50.00%

Distribution by countryDistribution by country

United States installs about 33.33% of HP ProtectTools Device Access Manager.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE