home

flux.exe

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘F.lux’.
MD5:
a1f86a5a0da1bec12b7dd19c6234bb15

SHA-1:
0761f9e56677af208c1a1d9efe3694062d89a870

SHA-256:
dbbacf4a78355261e652fc6612f007278d96907d8d2f9fc5c06fc58667c52202

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 9:54:05 PM UTC  (today)

File size:
944 KB (966,656 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
8/29/2009 8:00:13 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:9hwIkHdtw7tbbzQkKe0jA3bSI+qEEE0oic1yidLkaJanwnnbXmbKUUl/lC:o0RsU2A3bSIUEE0OL+2jkKbC

Entry address:
0x4D90C

Entry point:
55, 8B, EC, 6A, FF, 68, A0, 04, 46, 00, 68, 24, DC, 44, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 18, B1, 45, 00, 33, D2, 8A, D4, 89, 15, 20, A4, 4E, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 1C, A4, 4E, 00, C1, E1, 08, 03, CA, 89, 0D, 18, A4, 4E, 00, C1, E8, 10, A3, 14, A4, 4E, 00, 6A, 01, E8, DA, 5E, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, C7, 4B, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
360 KB (368,640 bytes)

Scheduled Task
Task name:
flux

Trigger:
Daily (Runs daily at 5:32 PM)


Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
F.lux

Command:
"C:\users\cleverton\local settings\apps\f.lux\flux.exe" \noshow


The file flux.exe has been discovered within the following program.

F.lux  by justgetflux
Publisher's description - “f.lux fixes this: it makes the color of your computer's display adapt to the time of day, warm at night and like sunlight during the day. It's even possible that you're staying up too late because of your computer. You could use f.”
stereopsis.com/flux
4% remove it
 
Powered by Should I Remove It?

Scan flux.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.