home

CNGKeyLock.exe

CNGkeyLock

DesignerWare, LLC

It runs as a separate (within the context of its own process) windows Service named “CNG Key Isolation Service”.
Publisher:
Microsoft Corporation  (signed by DesignerWare, LLC)

Product:
CNGkeyLock

Description:
CNG key isolation service

Version:
4.1.4097.27098

MD5:
00c9ca8b814ae9986db69490b22b9df2

SHA-1:
7118b0be01835ef01d802a6a1b26f839baf42d2f

SHA-256:
8e25eeb8429737102e12e12edc5498863b8955a5e4e8506490faaf9c12010b43

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 1:23:32 PM UTC  (today)

File size:
182.8 KB (187,144 bytes)

Product version:
4.1.4097.27098

Copyright:
Copyright © Microsoft 2010

Original file name:
CNGKeyLock.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Windows\System32\cngkeylock.exe

Digital Signature
Signed by:
DesignerWare, LLC

Authority:
GlobalSign nv-sa

Valid from:
11/29/2010 11:00:30 PM

Valid to:
11/29/2013 11:00:24 PM

Subject:
CN="DesignerWare, LLC", OU=Support, O="DesignerWare, LLC", L=North East, S=PA, C=US

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012C9B221BE6

File PE Metadata
Compilation timestamp:
3/21/2011 4:03:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:QDC7Zr11u/Rx1fiMhmqK+NW5WhHT8mB1qSZ+YzxKqvxXg2UBesmGvU5hel9ikT/V:AcPbvxVjPkZvi

Entry address:
0x1E44E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.2822

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
113.5 KB (116,224 bytes)

Service
Display name:
CNG Key Isolation Service

Service name:
CNGKeyLock

Description:
The CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The s

Type:
Win32OwnProcess

Group:
FSFilter Infrastructure


Scan CNGKeyLock.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.