home

mylbx.exe

My Lockbox

FSPro Labs

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘mylbx’.
Publisher:
FSPro Labs  (signed and verified)

Product:
My Lockbox

Version:
3.5.1.561

MD5:
17593bcfe8e40479a70fbc0a554dd2a9

SHA-1:
0b13fd537c4bbce4a32b667421976d7b76660ded

SHA-256:
a3374e182509580de03261fc0583976cff727b88713793d8ea435856b1b7e49f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 12:05:35 AM UTC  (today)

File size:
2.2 MB (2,303,752 bytes)

Product version:
3.5

Copyright:
Copyright © 2006-2014 FSPro Labs

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\my lockbox\mylbx.exe

Digital Signature
Signed by:
FSPro Labs

Authority:
VeriSign, Inc.

Valid from:
1/9/2014 1:00:00 AM

Valid to:
4/10/2017 1:59:59 AM

Subject:
CN=FSPro Labs, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=FSPro Labs, L=Taganrog, S=Rostov region, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7B6CC6957166C29858134F621F7124F8

File PE Metadata
Compilation timestamp:
10/8/2014 4:02:03 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:3RemOSU/RgJieyZpid43InVhyr23zPZt1lhltEjCjmw04:oF552i9b7InWr23zRtzHtEymwT

Entry address:
0x1000

Entry point:
68, 01, B0, 9E, 00, E8, 01, 00, 00, 00, C3, C3, 13, C1, 47, 19, 1C, 8F, 8E, 77, 34, C3, 31, EC, F2, 50, 9A, FA, 38, EE, 4D, EC, CB, 92, 03, D8, A8, C1, 52, D4, EC, 01, 96, 86, 13, CE, F4, 72, 45, 19, 8C, 41, 22, CF, 47, D0, CF, 34, 77, 41, 9B, 9E, 52, B7, 1B, 1D, B3, DC, FD, C9, 69, F5, EB, 05, 86, 6D, 06, BA, B6, 68, 58, 8F, CF, 51, 6E, 32, 8C, 21, CA, 0E, 9A, BD, D7, 73, C2, 45, 83, B7, 55, 4C, 3E, 9D, 5A, CB, 82, FB, EB, 31, C5, 2C, A6, 99, D0, 53, A1, 6A, 6C, 01, 34, 20, B3, 5E, F7, AE, 3C, 50, 42, 22...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
3.7 MB (3,834,368 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
mylbx

Command:
C:\Program Files\my lockbox\mylbx.exe \a


Scan mylbx.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.