Should I block it?

No, this file is 100% safe to run.

Additional versions

1, 0, 0, 1	87.50%
1, 0, 0, 1	12.50%

(Note, the developer publishes each variation of this file with the same version, but the hashes are unique.)

PE file structure

Show functions

Import table

gdi32.dll

GetStockObject, SelectObject, GetTextMetricsA, DeleteObject, SetTextColor, GetTextExtentPoint32W, SetBkMode, ExtTextOutA, SetBkColor

kernel32.dll

GetPrivateProfileIntA, WideCharToMultiByte, LoadLibraryA, GetProcAddress, GetUserDefaultLangID, FindFirstFileA, FindClose, _lopen, _lread, _lclose, HeapSize, GetSystemInfo, VirtualProtect, GetSystemDirectoryA, GetCPInfo, GetOEMCP, GetACP, VirtualQuery, InterlockedExchange, RtlUnwind, LCMapStringW, LCMapStringA, GetStringTypeW, GetStringTypeA, GetFileType, SetHandleCount, GetEnvironmentStringsW, GetLastError, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, UnhandledExceptionFilter, GetStdHandle, WriteFile, TerminateProcess, HeapReAlloc, OpenFile, GetCurrentThreadId, GetModuleFileNameA, MultiByteToWideChar, GetCurrentProcess, SetProcessWorkingSetSize, GetPrivateProfileStringA, GetLocaleInfoA, GetLocalTime, VirtualAlloc, VirtualFree, WriteProfileStringA, lstrcmpiA, GetDriveTypeA, _lcreat, HeapCreate, HeapDestroy, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, _llseek, GetVersionExA, GetCommandLineA, GetStartupInfoA, GetModuleHandleA, HeapAlloc, HeapFree, GetPrivateProfileStringW, GetPrivateProfileIntW, GetVersion, _lwrite, ExitProcess

lc.dll

_HookStart@4, _HookEnd@0, _GetLClockVersion@4

shell32.dll

ShellExecuteExA

user32.dll

FindWindowA, RegisterWindowMessageA, MessageBoxA, UnregisterClassA, PostMessageA, TranslateMessage, GetMessageA, ShowWindow, DispatchMessageA, DrawEdge, DefWindowProcA, GetDesktopWindow, SendMessageA, PostQuitMessage, wsprintfA, SetTimer, KillTimer, CreatePopupMenu, GetForegroundWindow, SetForegroundWindow, TrackPopupMenu, AppendMenuA, EnableMenuItem, GetSysColor, DrawTextA, GetDC, GetSystemMetrics, GetWindowThreadProcessId, AttachThreadInput, SetFocus, DestroyMenu, LoadIconA, LoadCursorA, RegisterClassA, CreateWindowExA, CharNextA, IsWindow, MessageBoxW

winmm.dll

mciSendStringA, waveOutUnprepareHeader, waveOutWrite, waveOutClose, waveOutPrepareHeader, mmioAscend, mmioClose, mmioRead, mmioDescend, mmioOpenA, waveOutReset, waveOutOpen

LClock.exe

LClock Application

Remove LClock.exe

Version:	1, 0, 0, 1
MD5:	38cc541d105dcba3d3768d6b191d9505
SHA1:	568f14dd52ee40cb1b696fdbac9aa3b5fd95b331
SHA256:	db2a4c0b6a96fd3db35ae296e28362d871cfe9f958b36adbe47077c7aec099f6

Overview

lclock.exe executes as a process with the local user's privileges. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). This is typically installed with the program LClock published by Neowin.

Details

File name:	lclock.exe
Product name:	LClock Application
Description:	LClock Application
Typical file path:	C:\Program Files\lclock\lclock.exe
File version:	1, 0, 0, 1
Size:	64 KB (65,536 bytes)
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

LClock

Neowin

3% remove

“LClock is a very simple program that makes the Windows' clock look like a Windows Longhorn Clock. LClock also comes with a simple but configurable popup calendar that opens when the systray clock is clicked. No more double clicking on the clock just to view the calendar in the Date and Time Properties dialog box. All additional features were suggested by users of LClock.”

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'LClock' → C:\Program Files\LClock\LClock.exe

Startup files (user) run

Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'LClock' → C:\Program Files\LClock\LClock.exe

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00029707%	0.028634%
Kernel CPU:	0.00024438%	0.013761%
User CPU:	0.00005269%	0.014873%
Kernel CPU time:	188 ms/min	100,923,805ms/min
Context switches:	3/sec	284/sec
Memory
Private memory:	1.7 MB	21.59 MB
Private (maximum):	1.77 MB
Private (minimum):	416 KB
Non-paged memory:	1.7 MB	21.59 MB
Virtual memory:	34.02 MB	140.96 MB
Virtual memory (peak):	40.36 MB	169.69 MB
Working set:	1.59 MB	18.61 MB
Working set (peak):	3.27 MB	37.95 MB
Resource allocations
Threads:	1	12
Handles:	50	600
GUI GDI count:	13	103
GUI USER count:	6	49

Process properties

Integrety level:	Undefined
Platform:	32-bit
Command line:	"C:\Program Files\lclock\lclock.exe"
Owner:	User
Parent process:	explorer.exe (Explorateur Windows by Microsoft)

Distribution by Windows OS

OS version	distribution
Microsoft Windows XP	100.00%

Distribution by country

Egypt installs about 37.50% of LClock Application.

Distribution by PC manufacturer

PC Manufacturer	distribution
Compaq	100.00%

Remove Adware and Spyware Programs, FREE Download!