home

DSLCMCANotify.exe

DS Life Cycle Management (DSLCM)

United Parcel Service

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘DSLCMCANotify’.
Publisher:
Systems Programming (Windows) : United Parcel Service, Inc.  (signed by United Parcel Service)

Product:
DS Life Cycle Management (DSLCM)

Description:
DS LCM Client Agent Notification Utility

Version:
1.6.16235.0

MD5:
771575e780ce79e26464d43b3921cd88

SHA-1:
18dd4e55efb308b90d08170c879bd958989ff2fe

SHA-256:
84eae27ef06b8f7a2c3c0af5a9259e9021cae5f74fe485ad68e7265904a542fe

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/16/2025 8:30:36 PM UTC  (today)

File size:
42.2 KB (43,256 bytes)

Product version:
1.6.16235.0

Copyright:
Copyright © 2005-2016 United Parcel Service, Inc. All Rights Reserved.

Original file name:
DSLCMCANotify.exe

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\ds\lcm\dslcmcanotify.exe

Digital Signature
Signed by:
United Parcel Service

Authority:
COMODO CA Limited

Valid from:
7/4/2016 8:00:00 PM

Valid to:
7/5/2019 7:59:59 PM

Subject:
CN=United Parcel Service, OU=805132 - Windows Web Services, O=United Parcel Service, STREET=340 MacArthur Blvd., L=Mahwah, S=NJ, PostalCode=07430, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00A2C086B16BF47A88102D5FF94B3A5E30

File PE Metadata
Compilation timestamp:
8/25/2016 7:12:12 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
80.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:U0ibeP35iY8K/P49OzG5Kla4HCfc0Ajf2u292GLddBLQjDhz2GFQIFdi7:U0ibQ35iY8K/+OzWgixA7SVddBLgDhp2

Entry address:
0xA39A

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 80, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.9584

Code size:
33 KB (33,792 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
DSLCMCANotify

Command:
"C:\Program Files\ds\lcm\dslcmcanotify.exe"


Scan DSLCMCANotify.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.