home

legitlibm.dll

Microsoft Windows Genuine Advantage Validation

Microsoft Corporation

This is installed with multiple programs including Lecteur Windows Media 11 and Windows Media Player 11. The file has been seen being downloaded from 38724f2b-a-62cb3a1a-s-sites.googlegroups.com and multiple other hosts.
Publisher:
Microsoft® Corporation  (signed by Microsoft Corporation)

Product:
Microsoft® Windows Genuine Advantage Validation

Description:
Windows Genuine Advantage Validation Library

Version:
1.4.0410.0

MD5:
d1fba38bd9745d7417ef9bfa4aa2435c

SHA-1:
e5161aad1cb7b67c7273cf3b18c39dd4dd856ba3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/19/2024 6:31:27 PM UTC  (today)

File size:
425.3 KB (435,464 bytes)

Product version:
1.4.0410.0

Copyright:
Copyright © Microsoft Corporation. All rights reserved.

Trademarks:
Microsoft® is a registered trademark of Microsoft Corporation.

Original file name:
LegitLib.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\windows media player\legitlibm.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
1/6/2005 1:20:19 AM

Valid to:
4/6/2006 2:30:19 AM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, OU=Copyright (c) 2000 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6105875800030000005A

File PE Metadata
Compilation timestamp:
1/10/2006 5:27:41 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
7.10

CTPH (ssdeep):
12288:RHDzw3ATf6NeiztQDr0K6XCui6+Jqlfbp:Rwgf6NXtTX33d

Entry address:
0x31F0

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 09, E8, 70, 00, 00, 00, 85, C0, 74, 20, 56, FF, 75, 10, FF, 75, 0C, FF, 75, 08, FF, 15, 80, 01, 46, 00, 83, 7D, 0C, 00, 8B, F0, 75, 05, E8, 07, 00, 00, 00, 8B, C6, 5E, 5D, C2, 0C, 00, 83, 3D, 84, 01, 46, 00, 01, 75, 3E, 53, 56, 8B, 35, B4, 10, 40, 00, 57, C7, 05, 84, 01, 46, 00, 02, 00, 00, 00, 33, FF, BB, 90, 01, 46, 00, 66, 83, 3C, 7D, A8, 01, 46, 00, FF, 74, 06, 53, FF, D6, 83, C3, 1C, 47, 3B, 3D, 08, 02, 46, 00, 76, E6, 68, 2C, 02, 46, 00, FF, D6, 5F, 5E, 5B, C3, 6A, 1C...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
378.5 KB (387,584 bytes)

The file legitlibm.dll has been discovered within the following programs.

Lecteur Windows Media 11  by Microsoft Corporation
Publisher's description - “Obtenez le Lecteur Windows Media pour votre version de Windows ou découvrez comment lire des fichiers Windows Media sur votre Mac.”
windows.microsoft.com/fr-fr/windows/windows-media-player
5% remove it
Windows Media Player 11  by Microsoft Corporation
Windows Media Player 11 was included with Vista with no updates, final release on XP. Windows Media Player is a media player and media library application developed by Microsoft that is used for playing audio, video and viewing images .
windows.microsoft.com/en-US/windows/download-windows-media-player
5% remove it
 
Powered by Should I Remove It?

The file legitlibm.dll has been seen being distributed by the following 2 URLs.

https://38724f2b-a-62cb3a1a-s-sites.googlegroups.com/site/.../LegitLibM.dll?attachauth=ANoY7crkCGrzWahzgovP3OhoSyljsxxHBl81cLXpYO3OVW0ITWpCF41sTfL85AsgAKbnsJSpegh6DiTP5RJqYXd-9pWyaZYwqTNSqUYJ6vdnVLOysn_4OqAnWy-P6AJwy7xSV7bEZYX9DE3s6GcL-NWwL8Nf0nCO4G2nsya-mlT5wVjMNeUoTqtmhWSyNG6ivsGnrlJ1ZyIS-oRmurt1sZWzeqEVkHyXvA==&attredirects=0

https://sites.google.com/site/.../LegitLibM.dll?attredirects=0

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.