» mlo.exe
Overview
Analysis
File Details
Behaviors (1)

mlo.exe

My Life Organized

Andriy Tkachuk

File name:

mlo.exe

Publisher:

mylifeorganized.net (signed by Andriy Tkachuk)

Product:

My Life Organized

Version:

4.4.1.2493

MD5:

a7a0ac8aeff68bfada43d323f435dd6b

SHA-1:

db0148cea3c80fd32d34428f00f1c7ec4d61ca90

SHA-256:

8b6ba576335ab45769e7c3304f3676646040a8b2d348336edcee708beb32d291

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/27/2024 6:08:57 PM UTC (today)

File size:

10.6 MB (11,065,800 bytes)

Product version:

4.4

Original file name:

mlo.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\mylifeorganized.net\mlo\mlo.exe

Digital Signature

Signed by:

Andriy Tkachuk

Authority:

StartCom Ltd.

Valid from:

2/3/2016 2:31:46 AM

Valid to:

2/3/2018 2:31:46 AM

Subject:

CN=Andriy Tkachuk, O=Andriy Tkachuk, L=Kharkiv, S=Kharkivska Oblast, C=UA

Issuer:

CN=StartCom Class 2 Object CA, OU=StartCom Certification Authority, O=StartCom Ltd., C=IL

Serial number:

2DF193D84E9E5A540E1879BBE83C50B2

File PE Metadata

Compilation timestamp:

8/12/2016 4:38:24 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:lWKl9vm3raXm7ErVuHO2DR/igoEnlvCwNxVq2S5rKKzRRZb632hpKbYZ2y7Y:lWK7m7rH75oEnlvCwDVjShD363yUqY

Entry address:

0x70CC94

Entry point:

55, 8B, EC, 83, C4, EC, 53, 56, 57, 33, C0, 89, 45, EC, B8, 54, 5A, AF, 00, E8, 54, FF, 8F, FF, 8B, 3D, 6C, 82, B2, 00, 33, C0, 55, 68, FD, CD, B0, 00, 64, FF, 30, 64, 89, 20, 33, C9, BA, 18, CE, B0, 00, B8, 54, CE, B0, 00, E8, 73, 45, B2, FF, 8B, D8, 68, B0, CE, B0, 00, 6A, FF, 6A, 00, E8, FF, 17, 90, FF, A3, 2C, 1A, BB, 00, 33, C0, 55, 68, E0, CD, B0, 00, 64, FF, 30, 64, 89, 20, E8, 8F, 19, 90, FF, 8B, F0, 8B, 07, E8, 86, FA, 9F, FF, 8B, 07, C6, 40, 5B, 00, 8B, 07, B2, 01, E8, 47, 16, A0, FF, 8B, 0D, D4... 
[+]

Entropy:

6.7853

Developed / compiled with:

Microsoft Visual C++

Code size:

7 MB (7,387,136 bytes)

Windows Firewall Allowed Program

Name:

mlo

Scan mlo.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.