» axlyonx64.dll
Overview
Analysis
File Details
Programs (1)

axlyonx64.dll

Lyoness Cashback AV Checker

Lyoness Cashback AG

The module axlyonx64.dll, “Lyoness Cashback AG ActiveX to check is AdBlock Plus Enabled” by Lyoness Cashback AG has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Lyoness Cashback Bar by Lyoness Cashback AG.

File name:

axlyonx64.dll

Publisher:

Lyoness Cashback AG (signed and verified)

Product:

Lyoness Cashback AV Checker

Description:

Lyoness Cashback AG ActiveX to check is AdBlock Plus Enabled

Version:

1.0.0.1

MD5:

c8706c3cf98de132ff53bfab64043f55

SHA-1:

d01d190c48ee364f35dfad1c6eef3182cb3f38d6

SHA-256:

e948df03372910214853add476c1623f5ddf66eaf61badd9807ad0e3289278d4

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/26/2024 7:06:37 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.LyonessCashbackAG (M)

16.1.13.21

File size:

89.4 KB (91,568 bytes)

Product version:

1.0.0.1

Original file name:

axLyon.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\lyoness cashback bar\axlyonx64.dll

Digital Signature

Signed by:

Lyoness Cashback AG

Authority:

GlobalSign nv-sa

Valid from:

10/21/2013 6:07:04 PM

Valid to:

10/21/2016 6:07:04 PM

Subject:

E=domainadmin@lyoness.ag, CN=Lyoness Cashback AG, O=Lyoness Cashback AG, L=Graz, S=Styria, C=AT

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121966E6F40865E27DA6418F77DA28077D3

File PE Metadata

Compilation timestamp:

10/28/2013 7:20:14 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

1536:PiP9Ss26Wut058EEgnnFlnsfPoJX3AC5UxWNCJFrpeRC7ZOpYFA7PQ3LlVP6NLG:aFZquy2EVnFln1JX3b5QqCJFrpoSZOpq

Entry address:

0xB334

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 77, 03, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 8B, FE, FF, FF, CC, CC, CC, 48, 8B, C4, 48, 89, 58, 08, 48, 89, 68, 10, 48, 89, 70, 18, 48, 89, 78, 20, 41, 54, 48, 83, EC, 20, 4D, 8B, 51, 38, 48, 8B, F2, 4D, 8B, E0, 41, 8B, 02, 48, 8B, E9, 49, 8B, D1, 48, 03, C0, 48, 8B, CE, 49, 8B, F9, 49, 8D, 5C, C2, 04, 4C, 8B, C3, E8, 3E, F8... 
[+]

Code size:

48 KB (49,152 bytes)

The file axlyonx64.dll has been discovered within the following program.

Lyoness Cashback Bar by Lyoness Cashback AG

www.lyoness.net

About 7% of users remove it

Remove axlyonx64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.