home

lsc.exe

lsc

LouYue Software Development Co.,Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘lsc’.
Publisher:
LouYue Software Development Co.,Ltd.  (signed and verified)

Product:
lsc

Version:
1.00

MD5:
97f53a808b583c41579d1b802df61ede

SHA-1:
f8846bc44a3369a0512a71f1d2325a73a9e6e23a

SHA-256:
0337aa3c0f07d0b8dd72e9c78ab143841fea24b9570c0759ae8aca0170727f8e

Scanner detections:
6 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/19/2024 3:17:27 PM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
ApplicUnsaf.Win32.Monitor.Agent.a
17599

McAfee
Keylog-MySpyMon
5600.7247

Rising Antivirus
PE:Trojan.Win32.Generic.14D9A677!349808247
23.00.65.14115

Trend Micro House Call
TROJ_SPNV.05A414
7.2.17

Trend Micro
TROJ_SPNV.05A414
10.465.17

VIPRE Antivirus
Spyware.Keylogger
25354

File size:
291 KB (297,984 bytes)

Product version:
1.00

Original file name:
lsc.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\lsc\lsc.exe

Digital Signature
Signed by:
LouYue Software Development Co.,Ltd.

Authority:
VeriSign, Inc.

Valid from:
4/12/2011 2:00:00 AM

Valid to:
4/12/2012 1:59:59 AM

Subject:
CN="LouYue Software Development Co.,Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="LouYue Software Development Co.,Ltd.", L=LouDi, S=HuNan, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4196F92430255474574D2184B3168698

File PE Metadata
Compilation timestamp:
5/31/2011 4:37:27 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:uElkc56y4Z4YmmZSRaqnMZ7T0nRTSgwe4/FEQo4FGWMg+WGtpRTA:uEP5a4YmmZSTMZEXL4/FEQhlGtM

Entry address:
0x2E28

Entry point:
68, DC, 67, 40, 00, E8, EE, FF, FF, FF, 00, 00, 40, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, 7C, 0B, D5, 6F, CA, 05, 3E, 4A, 9A, B0, BE, 77, 33, 39, 08, D3, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 20, 20, 20, 20, 20, 20, B1, BB, BF, D8, B6, CB, 00, 6F, 00, 20, 20, 20, 20, 20, 20, 20, 00, 00, 00, 00, 88, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 0C, 00, 00, 00, E6, 3D, 40, 1F, 04, 64, 0F, 40, 89, 1D, 2D, A4, DE, 22, DB, 25, 01, 00, 00, 00, 98, 00, 00, 00, A8, 00, 00, 00, 01, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
272 KB (278,528 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
lsc

Command:
C:\Program Files\lsc\lsc.exe


Scan lsc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.