home

licenseprovider.dll

MD5:
b367258637ff97d23b3ab6a8d47e38c6

SHA-1:
be0551bc8fd32725b623d8043b9dd39c4db9fbed

SHA-256:
725be8959899773ab1b336e3d4fa2b34dd3e7167faad27504083b74953c201e1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/21/2024 11:06:53 AM UTC  (today)

File size:
325 KB (332,800 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\ibm\appscan standard\licenseprovider.dll

File PE Metadata
Compilation timestamp:
3/9/2013 1:05:59 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:2AG2gh6KRYmdYu8cQVubh2+vcLWnkcPLIl3n1TKOWPBOiYPkFQ4EHHJOnJj6aKcA:FG2ghZYmKu8cRvfTSKdBOiYPkFQ4EHHf

Entry address:
0x27148

Entry point:
FF, 25, 10, B3, 02, 10, 8B, 4D, F0, FF, 25, 30, B1, 02, 10, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, EC, 33, C8, E8, B6, D1, FF, FF, B8, 44, 8B, 04, 10, E9, C6, FE, FF, FF, 8B, 4D, 08, FF, 25, 30, B1, 02, 10, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, F0, 33, C8, E8, 92, D1, FF, FF, B8, 70, 8B, 04, 10, E9, A2, FE, FF, FF, FF, 75, F0, FF, 15, 88, B2, 02, 10, 59, C3, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, EC, 33, C8, E8, 6C, D1, FF, FF, B8, 9C, 8B, 04, 10, E9, 7C, FE, FF, FF, FF, 75, F0, FF, 15, 88, B2, 02, 10, 59, C3, 8B...
 
[+]

Entropy:
6.6366

Code size:
167 KB (171,008 bytes)

The file licenseprovider.dll has been seen being distributed by the following 4 URLs.

http://dl.download.csdn.net/down11/20160720/.../DQgRs=

https://data.eu1.younitedcontent.com/v2/data/share:efb0c8d4-2f22-ac7d-7217-e22b326d6651/.../LicenseProvider.dll?&save=true

http://d.pcs.baidu.com/file/b367258637ff97d23b3ab6a8d47e38c6?fid=2081804410-250528-802160822953485&time=1441786084&rt=sh&sign=FDTAERVY-DCb740ccc5511e5e8fedcff06b081203-O5zj3Hwiea84vIRw063bKE03tCs=&expires=8h&prisign=GF6x2T2CVlRV01o7Pki028kp4XDNjnf6nYJvYvdmp dC6iCzPtkM2aVC7McRJk1PX i0iHUMCEEFna9ynYaqhi3aJ6QdaUXHNFP8qQ1RsHLvFxQMiFwgORaeYyj8G4F4mJQ4m8V6tmtbyA3pQ0GZTPxKH8e/ZmPEfspRr3AZWqx2RegzuVnzaX3A3Rtz2/Obwq48P8v2auXEmQ9S//2d2WXCdaFTGSKyuAoNHzSQqOsziruBVElEmJdWStm3i9QY&chkv=1&chkbd=0&chkpc=et&r=450857273

http://d.pcs.baidu.com/file/.../Dg==&chkv=1&chkbd=0&chkpc=et&r=823702199

Scan licenseprovider.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.