home

GiljabiStart.exe

LIU

LG Electronics Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘LG Intelligent Update’.
Publisher:
LG Electronics Inc.  (signed and verified)

Product:
LIU

Description:
Giljabi Start

Version:
4.0.1.7

MD5:
f75504f7ca6c86bee9412517806aa917

SHA-1:
7a8f2d06b31995f033e5a7a13a9ce3f27aad69ae

SHA-256:
9aaec7ea19bf52ab9251806cd8db7b5e09fb3c19ae411dae68b026b6b76b9b5a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 2:03:33 AM UTC  (today)

File size:
321.4 KB (329,072 bytes)

Product version:
4.0.1.7

Original file name:
GiljabiStart.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\lg_swupdate\giljabistart.exe

Digital Signature
Signed by:
LG Electronics Inc.

Authority:
VeriSign, Inc.

Valid from:
7/25/2010 9:00:00 PM

Valid to:
8/17/2011 8:59:59 PM

Subject:
CN=LG Electronics Inc., OU=Business Solution, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=LG Electronics Inc., L=Pyeongtaek-si, S=Gyeonggi-do, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
571235D280DD02FFB6955B288E58122D

File PE Metadata
Compilation timestamp:
6/22/2011 4:40:35 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:tOjYBJaP+fXC/9E2MeQ2M3Tm7vVr144FBA4A44IRZBPdV:tO0a56eQ2Mjm7vVrDBJPD

Entry address:
0x4DCDE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
304 KB (311,296 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
LG Intelligent Update

Command:
"C:\Program Files\lg_swupdate\giljabistart.exe" gilautouc


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.