home

TLDL.EXE

Desktop Lock

TopLang Software

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Desktop Lock’.
Publisher:
TopLang Software  (signed and verified)

Product:
Desktop Lock

Description:
Desktop Lock Kernel

Version:
7, 3, 3, 1

MD5:
86d63f633c8d1573bd6ce6b1799feb90

SHA-1:
beb520d4bba0504c3d68df5ca9abfb4cc00262ec

SHA-256:
649f526e6ff48ed15cce75572a6b3e0ab1dd1d6aae29582db91ac2adc805b7da

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 2:40:12 AM UTC  (today)

File size:
201.3 KB (206,096 bytes)

Product version:
7, 3, 3, 1

Copyright:
(C) TopLang Software

Original file name:
TLDL.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\desktop lock\tldl.exe

Digital Signature
Signed by:
TopLang Software

Authority:
TopLang Software

Valid from:
12/24/2011 8:42:29 AM

Valid to:
1/1/2040 12:59:59 AM

Subject:
CN=TopLang Software, E=support@toplang.com, O=TopLang Software

Issuer:
CN=TopLang Software, E=support@toplang.com, O=TopLang Software

Serial number:
D6A4C22F4A7C89AC4A3C46AC7205A72B

File PE Metadata
Compilation timestamp:
1/13/2014 9:34:24 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:g5GcuDqWmrP76tSmzvk5FDcJOKtAtTVNByw2E1sWc8eM:g5aqWmrP76tSmzvk5FDcJOKtAtxvFlh1

Entry address:
0x15DE5

Entry point:
55, 8B, EC, 6A, FF, 68, E0, F5, 41, 00, 68, 44, A0, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, CC, F1, 41, 00, 33, D2, 8A, D4, 89, 15, D8, 93, 42, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, D4, 93, 42, 00, C1, E1, 08, 03, CA, 89, 0D, D0, 93, 42, 00, C1, E8, 10, A3, CC, 93, 42, 00, 6A, 01, E8, 9B, 41, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, E7, 13, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
120 KB (122,880 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Desktop Lock

Command:
C:\Program Files1\deskto~1\tldl.exe \boot


Scan TLDL.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.