» lg pc suite.exe
Overview
Analysis
File Details

lg pc suite.exe

FIRSERIA, S.L.

The setup program uses the Firseria/Solimba AppInstaller (DownloadMR) which is a monetization download manager that bundles additional adware offers, typically by wrapping legitimate applications. The application lg pc suite.exe by FIRSERIA, S.L has been detected as adware by 12 anti-malware scanners. The program is a setup application that uses the Solimba DownloadMR installer. The installer uses the Solimba download manager to push adware offers during the download and setup process. Bundled adware includes search and shopping web browser toolbars.

File name:

lg pc suite.exe

Publisher:

Firseria (signed by FIRSERIA, S.L.)

Description:

Downloader

Version:

1.0.0.7

MD5:

803c736980040a4ec39cd408f8a01b5b

SHA-1:

a506e21b7cb77bb87f6e4ff987caf69a22819a46

SHA-256:

3af77b526333795d930a1e755d6434f1660d4b9bef348205f3d31bb0f3c54079

Scanner detections:

12 / 68

Status:

Adware

Explanation:

Uses the Solimba installer to bundle adware offers.

Description:

This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:

4/23/2024 8:00:35 AM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

TR/Crypt.ULPM.Gen

7.11.125.180

avast!

Win32:Firseria-A [PUP]

2014.9-151029

Comodo Security

Application.Win32.Solimba.J

17633

Dr.Web

Adware.Downware.1433

9.0.1.0302

ESET NOD32

Win32/FirseriaInstaller (variant)

9.9307

herdProtect (fuzzy)

variant of supertela.exe (Adware)

2015.10.29.13

Malwarebytes

PUP.Optional.FirSeriaInstaller

v2015.10.29.01

Reason Heuristics

PUP.Solimba.FIRSERIA.Bundler (M)

15.9.2.11

Rising Antivirus

PE:PUF.FirseriaInstaller@CV!1.5C42

23.00.65.151027

Sophos

Solimba Installer

4.96

Vba32 AntiVirus

Downloader.Morstar

3.12.24.3

VIPRE Antivirus

DownloadMR

25546

File size:

227.8 KB (233,272 bytes)

Product version:

1.0.0.7

Original file name:

installer

File type:

Executable application (Win32 EXE)

Bundler/Installer:

Solimba DownloadMR

Language:

Language Neutral

Digital Signature

Signed by:

FIRSERIA, S.L.

Authority:

Thawte, Inc.

Valid from:

7/24/2013 2:00:00 AM

Valid to:

7/25/2014 1:59:59 AM

Subject:

CN="FIRSERIA, S.L.", OU=IT, O="FIRSERIA, S.L.", L=Badalona, S=Barcelona, C=ES

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

73C4780FAC0CD497B0778732FB8AF673

File PE Metadata

Compilation timestamp:

9/9/2013 8:24:51 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

6144:bfOpM5uMf/j/lSCq0wWCBY5y3aiAGWd573slDD0Ig:bmpM5t3nFCBY5dikLsVE

Entry address:

0x57760

Entry point:

60, BE, 00, 50, 42, 00, 8D, BE, 00, C0, FD, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

204 KB (208,896 bytes)

Remove lg pc suite.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.