home

fwupdate.exe

LG Firmware Autoupdate

LG Electronics Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from lgodd.lge.com.
Publisher:
BitLeader  (signed by LG Electronics Inc.)

Product:
LG Firmware Autoupdate

Version:
1.00

MD5:
8667d9b4ffa3abd1ec3d61004667e1da

SHA-1:
132b15cb6bd2715bce7422ced7ec8f5d005387b5

SHA-256:
7f2258c9155d25ef22998620290abf7632ab9837397ff6b8ce889718402b3022

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/27/2024 6:44:30 AM UTC  (today)

Scan engine
Detection
Engine version

Boost by Reason
Optional.LGElectronics.I
188163

File size:
851.1 KB (871,536 bytes)

Product version:
1.00

Original file name:
fwupdate.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\lg_fwupdate\fwupdate.exe

Digital Signature
Signed by:
LG Electronics Inc.

Authority:
VeriSign, Inc.

Valid from:
7/28/2011 9:00:00 PM

Valid to:
8/16/2014 8:59:59 PM

Subject:
CN=LG Electronics Inc., OU=Business Solution, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=LG Electronics Inc., L=Pyeongtaek-si, S=Gyeonggi-do, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
40E1FFC406A7F24F7B409A7338033B3D

File PE Metadata
Compilation timestamp:
7/13/2012 2:44:23 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:vZavCBCDJTZYfZVC1jPG1OpBrbvOD3YKeXOSW:haEWbYhQ1jPG1OpBrbvOD3YKeX1W

Entry address:
0x4AE8

Entry point:
68, D0, 53, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 08, AC, 0E, 6A, BD, 3B, 34, 4C, B6, 0D, 68, 1B, DF, AF, F9, 14, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 46, 2D, 39, 37, 35, 34, 66, 77, 75, 70, 64, 61, 74, 65, 00, 30, 39, 30, 38, 7D, 23, 31, 00, 00, 00, 00, 01, 00, 22, 00, B4, EF, 40, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00, 68, F6, 40, 00, E4, 14, 4D, 00, 00, 00, 00, 00, 48, B4, 1F, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
832 KB (851,968 bytes)

The file fwupdate.exe has been seen being distributed by the following URL.

http://lgodd.lge.com/fwnewau/.../fwupdate.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.