home

UnLockIT.exe

EMCO UnLock IT

EMCO ehf.

Publisher:
EMCO  (signed by EMCO ehf.)

Product:
EMCO UnLock IT

Description:
UnLock Locked File

Version:
3.0.4.3017

MD5:
6b5ed9290b818622905998dec7d0cb15

SHA-1:
986c027be46ba627abeee9cab328e6a0824ffc4e

SHA-256:
b1820043e59fcdd9685e85eca623707eda20d9bec15a1bba2ed16618419c6132

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:29:28 PM UTC  (a few moments ago)

File size:
6.5 MB (6,768,824 bytes)

Product version:
3.0.4.3017

Copyright:
Copyright © EMCO 2001 - 2013

Original file name:
UnLockIT.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\emco\unlock it\v3\unlockit.exe

Digital Signature
Signed by:
EMCO ehf.

Authority:
VeriSign, Inc.

Valid from:
3/6/2013 7:00:00 PM

Valid to:
4/6/2014 7:59:59 PM

Subject:
CN=EMCO ehf., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=EMCO ehf., L=Reykjavik, S=Reykjavik, C=IS

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4DE3CB222A1C3BCD69EF4F85259D1AFC

File PE Metadata
Compilation timestamp:
10/21/2013 6:33:06 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:ww63bdhWgODhrvntl4G0fY1nULNxO6XFirEs29sXAOpLM5TdqSTGqROqjFj7h+Qu:wh3brOB74G0fY1SLva1LGNxh+QJm0w5

Entry address:
0x47B338

Entry point:
55, 8B, EC, 83, C4, EC, 53, 56, 57, B8, 50, 55, 87, 00, E8, E5, DA, B8, FF, 8B, 1D, 64, A8, 88, 00, 8B, 35, 00, A3, 88, 00, 8B, 03, E8, 0A, 07, C5, FF, 8B, 03, B2, 01, E8, 69, 22, C5, FF, 8B, 03, BA, DC, B4, 87, 00, E8, 85, 01, C5, FF, B2, 01, A1, C4, 1E, 87, 00, E8, E9, 6B, FF, FF, 8B, 15, E8, 9C, 88, 00, 89, 02, A1, E8, 9C, 88, 00, 8B, 00, 8B, 10, FF, 52, 04, 84, C0, 75, 0F, A1, E8, 9C, 88, 00, E8, D3, A8, B9, FF, E9, 20, 01, 00, 00, A1, E8, 9C, 88, 00, 8B, 00, 8B, 10, FF, 52, 08, 84, C0, 75, 0F, A1, E8...
 
[+]

Entropy:
6.8577

Developed / compiled with:
Microsoft Visual C++

Code size:
4.5 MB (4,692,480 bytes)

The file UnLockIT.exe has been seen being distributed by the following URL.

http://storage.emcosoftware.com/autoupdate/unlockit/.../UnLockIT.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.