home

LPStation.exe

LISMO Port Station

Sony Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘LPStation’.
Publisher:
Sony Corporation  (signed and verified)

Product:
LISMO Port Station

Version:
5.1.01.20210

MD5:
e30d339dfc014d6a368c66a3c41466d1

SHA-1:
c5435b2881e9ce81dc85aace867700ea2b1db974

SHA-256:
893906d9c12a3eb159ab91f6756414756cce4978716c1351cce0b3cd2753eca5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 12:52:33 PM UTC  (today)

File size:
1.5 MB (1,533,288 bytes)

Product version:
5.1.01

Copyright:
Copyright 2007-2009 Sony Corporation

Original file name:
LPStation.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\common files\sony shared\avlib\lpstation\lpstation.exe

Digital Signature
Signed by:
Sony Corporation

Authority:
VeriSign, Inc.

Valid from:
5/27/2009 9:00:00 AM

Valid to:
5/28/2010 8:59:59 AM

Subject:
CN=Sony Corporation, OU=PC Application Design Department, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Sony Corporation, L=Minato-ku, S=Tokyo, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
703B4A5E28DACF3D8A2350589E43EAF7

File PE Metadata
Compilation timestamp:
8/21/2009 11:42:48 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:CvQBP/8DJMkwZ0fVKF/gWw7+NwsaTdfEl6kic:CvQBP/8DJM/Z0fVKF/gX7+sdfEl6kic

Entry address:
0x8EBDE

Entry point:
E8, CE, 80, 00, 00, E9, 17, FE, FF, FF, 53, 56, 8B, 74, 24, 0C, 57, 33, FF, 83, CB, FF, 3B, F7, 75, 1D, E8, 73, 10, 00, 00, 57, 57, 57, 57, 57, C7, 00, 16, 00, 00, 00, E8, B3, D9, FF, FF, 83, C4, 14, 83, C8, FF, EB, 42, F6, 46, 0C, 83, 74, 37, 56, E8, DE, 82, 00, 00, 56, 8B, D8, E8, AA, 82, 00, 00, 56, E8, 77, 82, 00, 00, 50, E8, A4, 81, 00, 00, 83, C4, 10, 85, C0, 7D, 05, 83, CB, FF, EB, 11, 8B, 46, 1C, 3B, C7, 74, 0A, 50, E8, 79, D5, FF, FF, 59, 89, 7E, 1C, 89, 7E, 0C, 8B, C3, 5F, 5E, 5B, C3, 6A, 0C, 68...
 
[+]

Entropy:
5.5028

Code size:
680 KB (696,320 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
LPStation

Command:
C:\Program Files\common files\sony shared\avlib\lpstation\lpstation.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.