home

lgpcsuite_setup.exe

LG PC Suite

LG Electronics Inc.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. It runs as a scheduled task under the Windows Task Scheduler. The file has been seen being downloaded from docs.google.com and multiple other hosts.
Publisher:
LG Electronics  (signed by LG Electronics Inc.)

Product:
LG PC Suite

Version:
17530

MD5:
700385cadc14c706171a04052f74ec1a

SHA-1:
0e65f3f4949f348c952fcc2dabca7f8452b4a3b4

SHA-256:
d5a43e7a9406e5e55158b3ea7853a4dc8ad05fd0fad138df0ac020196f2ec0e1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 4:26:22 AM UTC  (today)

File size:
206.3 MB (216,317,856 bytes)

Product version:
5.3.06.20130913

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\lgpcsuite_setup.exe

Digital Signature
Signed by:
LG Electronics Inc.

Authority:
VeriSign, Inc.

Valid from:
7/28/2011 8:00:00 PM

Valid to:
8/16/2014 7:59:59 PM

Subject:
CN=LG Electronics Inc., OU=Business Solution, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=LG Electronics Inc., L=Pyeongtaek-si, S=Gyeonggi-do, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
40E1FFC406A7F24F7B409A7338033B3D

File PE Metadata
Compilation timestamp:
9/2/2011 5:15:57 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6291456:txcWjA99ITioihASXTr8nT9Ac7tDd5tU+:txcuA3HoiqITihq+

Entry address:
0x33CE

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 78, 85, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 55, FF, 15, B4, 82, 40, 00, 6A, 08, A3, 78, 06, 47, 00, E8, 68, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, 90, 05, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 74, 85, 40, 00, FF, 15, 84, 81, 40, 00, 68, 5C, 85, 40, 00, 68, 80, 85, 46, 00, E8, 38, 26, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, A0, 10, 4C, 00, 57, E8, 26, 26, 00, 00...
 
[+]

Entropy:
7.9997

Packer / compiler:
Nullsoft install system v2.x

Code size:
25.5 KB (26,112 bytes)

Scheduled Task
Task name:
{B4291A61-B662-4013-8468-49D3AFAA1DCB}

Trigger:
Registration (Runs on registration)


The file lgpcsuite_setup.exe has been seen being distributed by the following 21 URLs.

https://docs.google.com/uc?export=download&confirm=U6fg&id=0Bxo_3Ry0H55-amtqNTdnNmZBX1U

https://ln.syncusercontentpro.com/mfs-60:35fc3ba2e6a307a11b6d9179a6980f59=============================/.../LG PC Suite Setup 5.3.06.20130913.exe

https://docs.google.com/uc?export=download&confirm=da1J&id=0B_r6upjBMmyGdHlBeHRYcVVoRlU

https://docs.google.com/uc?export=download&confirm=d9IU&id=0B_r6upjBMmyGdHlBeHRYcVVoRlU

https://docs.google.com/uc?export=download&confirm=m7aQ&id=0B_r6upjBMmyGdHlBeHRYcVVoRlU

https://doc-08-04-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/e7hcmaic2kmmjrhp22tms8kt5urtf1fe/1476460800000/12576850000591146812/.../0B_r6upjBMmyGdHlBeHRYcVVoRlU?e=download

https://docs.google.com/uc?export=download&confirm=X-4T&id=0B_r6upjBMmyGdHlBeHRYcVVoRlU

http://ftp-stahuj.centrum.cz/dl/bff8b58218d0f712b98da827289b6a2f/57cf8c72/stahuj/download/software/secured/l/lg-pc-suite/.../LGPCSuite.exe

http://s6414.chomikuj.pl/File.aspx?e=f7AU54lh2KZVzGIv2fJ_ldMlqX3Tl-yeTq1Y6Bj7-zVqlMnkfUfi7xOTFyRY2PRfQeltWB1eX_jodEJ8J-jGXzz2Lglg3XMiPfRAUK07D2Clyags4R-dlEYq9WmU3rYMiMDSy79k_dnPgtYdoLcxtQ&pv=2

https://docs.google.com/uc?export=download&confirm=PTSK&id=0B_r6upjBMmyGdHlBeHRYcVVoRlU

http://csmgdl.lgmobile.com/swdata/MOBILESYNC/GO/P5.2.17.20121218/LGPCSuite/.../LGPCSuite_Setup.exe

http://f1.install-driver.com/download/.../1409158563_LGPCSuite-Setup.exe

https://docs.google.com/uc?export=download&confirm=hp7P&id=0B_r6upjBMmyGdHlBeHRYcVVoRlU

https://xq55.app.box.com/index.php?rm=box_download_shared_file&shared_name=0su1e9ac0qhmlp0vsfcz&file_id=f_12242103944

https://docs.google.com/uc?export=download&confirm=oLU7&id=0Bxo_3Ry0H55-amtqNTdnNmZBX1U

https://doc-0g-4o-docs.googleusercontent.com/docs/securesc/jaen6pjq7vtau5n9tftibr6669j4gmi6/1c3n9qcq2cpt18skhd88iautkd8ur3de/1411826400000/.../10080535629005110579/0B8V8zvQIjOwGLWpjRWk3Mm5pQlk?h=16653014193614665626&e=download

https://docs.google.com/uc?export=download&confirm=k8yq&id=0Bxo_3Ry0H55-amtqNTdnNmZBX1U

http://dl.cdn.chip.de/downloads/.../LGPCSuite_Setup_5314.exe

https://docs.google.com/uc?export=download&confirm=_C7F&id=0Bxo_3Ry0H55-amtqNTdnNmZBX1U

http://tool.xcdn.gdms.lge.com/swdata/MOBILESYNC/GO/P5.3.06.20130913/LGPCSuite/.../LGPCSuite_Setup.exe

http://tool.xcdn.gdms.lge.com/.../downloader.dev?fileKey=PW01720120110

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.