» mylbx.exe
Overview
Analysis
File Details
Behaviors (1)

mylbx.exe

My Lockbox

FSPro Labs

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘mylbx’.

File name:

mylbx.exe

Publisher:

FSPro Labs (signed and verified)

Product:

My Lockbox

Version:

3.0.2.471

MD5:

c40d3e0d7d630669cc5753b6d816840e

SHA-1:

ad7f67a57bddd437924135f47b2203ea5ca764c7

SHA-256:

de9228a7039d8c2e331fba00ef3c39714fb4d2891fbbf19a6d88e87fbf6e6eee

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/20/2024 4:17:16 AM UTC (today)

File size:

2.2 MB (2,291,488 bytes)

Product version:

3.0.2

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\my lockbox\mylbx.exe

Digital Signature

Signed by:

FSPro Labs

Authority:

VeriSign, Inc.

Valid from:

12/12/2012 7:00:00 AM

Valid to:

2/11/2014 6:59:59 AM

Subject:

CN=FSPro Labs, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=FSPro Labs, L=Taganrog, S=Rostov region, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

45FB369A2BC4B8B5E5131DB218373C22

File PE Metadata

Compilation timestamp:

9/23/2013 5:26:02 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:zZOkdYJsFDZubpkPYf49xwHpcd+kOgs7VBVYSE0cs33AosBPNhJ88hB378ltCOa2:zZUQutsx+2+kOQt0cLPu8kltwVjo40

Entry address:

0x1000

Entry point:

68, 01, 10, 9E, 00, E8, 01, 00, 00, 00, C3, C3, 13, C1, 47, 19, 1C, 8F, CE, 77, 34, C3, 31, EC, F2, 50, 9A, FA, 38, EE, 4D, D1, A8, 51, E6, 0A, 42, 36, 5F, EF, 6C, 89, E6, 13, 33, 79, 5A, 7A, 89, 6B, 20, BB, B8, E9, 89, CB, 5F, 4E, FA, 0B, 25, DE, F6, 78, A8, ED, DF, 7B, BD, 2E, 69, 52, CE, 95, 56, C0, FA, 8E, B2, 28, 37, 64, FE, 4D, 6C, 6D, 12, B0, D1, A4, 27, 01, 55, 2A, 3E, 9D, 02, CF, A2, BF, 3E, 9A, 58, D9, D4, 52, 25, D2, F1, 9E, 32, FC, BB, 50, F3, 63, 70, 77, 7C, 17, 6A, 44, CE, BA, C2, 99, 07, BB... 
[+]

Entropy:

7.8953

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

3.6 MB (3,806,208 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

mylbx

Command:

C:\Program Files\my lockbox\mylbx.exe \a

Scan mylbx.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.