Why is a Windows 10 Update calling lockapp.exe

Question

Hello, My company has an antivirus software that picks up any unusual commands or processes that are being called on or ran. Recently an employee ran the February 13th, 2024 KB5034763 Cumulative Update for Windows 10 and when he restarted his PC and during the restart lockapp.exe tried to connect to the network. Lockapp.exe tried running the following command that was then pinged and blocked by our antivirus software. -ServerName:WindowsDefaultLockScreen.AppX7y4nbzq37zn4ks9k7amqjywdat7d3j2z.mca If anyone has any idea as to what this command is or why a Windows native executable would be trying to run this command I would appreciate the input.

Thank you, David H.

Answer 1

That is the lock screen app. It runs when the lock screen is shown. It started connecting to the INet after an update a long time ago. Not really sure why you suddenly started getting reports about it as you should have been getting reports after any Windows update that triggers the "we made changes" like messaging on the lock screen.