home

Lockdown.exe

FrontFace Lockdown Tool for Windows

mirabyte GmbH & Co. KG

Publisher:
mirabyte  (signed by mirabyte GmbH & Co. KG)

Product:
FrontFace Lockdown Tool for Windows

Description:
FrontFace Lockdown Tool

Version:
1.5.0.0

MD5:
85f91d488e31821c631b5768a2c0b8fa

SHA-1:
1d45244a0b80eeed033843ad8842742f7440a36f

SHA-256:
d7ab65dc6c3ab7f76836a972a7e09b0e97bc0cedb2fd3ad993e71bedebecfc6b

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/30/2024 10:34:30 AM UTC  (today)

Scan engine
Detection
Engine version

AegisLab AV Signature
Troj.W32.Gen.lYan
2.1.4+

File size:
2.2 MB (2,271,272 bytes)

Product version:
1.5.0.0

Copyright:
Copyright © 2014-2016 by mirabyte GmbH & Co. KG

Trademarks:
mirabyte, FrontFace

Original file name:
Lockdown.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\lockdown.exe

Digital Signature
Signed by:
mirabyte GmbH & Co. KG

Authority:
Symantec Corporation

Valid from:
7/16/2015 5:30:00 AM

Valid to:
10/15/2018 5:29:59 AM

Subject:
CN=mirabyte GmbH & Co. KG, O=mirabyte GmbH & Co. KG, L=Hamm, S=Nordrhein-Westfalen, C=DE

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
70D06877418A93173911EC06C23EDC8E

File PE Metadata
Compilation timestamp:
4/20/2016 6:38:28 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
48.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:Pmz7i/Z0S6TAZ/FZ4e6lWn5Z/YO7NoXa62R8fhtXnDX+hxzul:P47ih0hTkFZ4lWnrwO7UnwedDXgxzg

Entry address:
0x22429E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.5896

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
2.1 MB (2,237,440 bytes)

The file Lockdown.exe has been seen being distributed by the following URL.

http://download.mirabyte.com/Lockdown.exe

Scan Lockdown.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.