home

lspfix.exe

CEXX.ORG

This is a setup program which is used to install the application.
Publisher:
CEXX.ORG

Version:
1.1.0.0

MD5:
a7690639d8fc6f297c0406fb8b8d7e21

SHA-1:
91e3601fc29eda1fb12655a980c901190246c072

SHA-256:
dabb85835571f6449ce8cac7e3561d9dcfe477f77a86d28bf64beff93c4adb08

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 8:16:09 AM UTC  (today)

File size:
182.5 KB (186,880 bytes)

Product version:
1.1.0.0

Copyright:
Cexx.org

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
7/5/2006 4:12:00 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
3072:MIoPY5YzeOOLys+m/srooV6VS18b2bx8HipDytVXIdPnMJzgmcoE6WZe:MIoPYa6gmGooV6VS18bWyemIdUqiW

Entry address:
0x7DFB0

Entry point:
60, BE, 00, 20, 45, 00, 8D, BE, 00, F0, FA, FF, C7, 87, 14, 4E, 06, 00, D7, 06, 78, C7, 57, 83, CD, FF, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 19, 8B, 1E, 83, EE, FC, 11, DB, 72, 10, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 78, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07...
 
[+]

Entropy:
7.8715

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.22 (Delphi) stub

Code size:
180 KB (184,320 bytes)

The file lspfix.exe has been discovered within the following program.

HijackThis 1.99.1  by Soeperman Enterprises Ltd.
HijackThis is an open source enumerating tool for Microsoft Windows originally created by Merijn Bellekom, and later sold to Trend Micro. The program is notable for targeting browser-hijacking methods, rather than relying on a database of known spyware.
www.spywareinfo.com/~merijn
About 7% of users remove it
 
Powered by Should I Remove It?

The file lspfix.exe has been seen being distributed by the following 3 URLs.

ftp://ftp.psu.ac.th/pub/.../LSPFix.exe

http://cexx.org/LSPFix.exe

http://www.cexx.org/LSPFix.exe

Scan lspfix.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.