home

LinksicleClientIE.dll

Linksicle Client BHO x64

Linksicle

This is part of the InfoAtoms browser extension which will display variopus forms of advertising in the web browser by injecting new ads such as banner, text-links and search results. The module LinksicleClientIE.dll by Linksicle has been detected as adware by 10 anti-malware scanners.
Publisher:
Linksicle  (signed and verified)

Product:
Linksicle Client BHO x64

Version:
1.8.1.0

MD5:
4efaa71429731e499040422f77730241

SHA-1:
444b8dbcfdd04510674fb7cd7bddb1d802849d20

SHA-256:
0c998d846f7017c57a47a729a1eb705d3e7bee78f80244b6e8f9b5585f2f548c

Scanner detections:
10 / 68

Status:
Adware

Analysis date:
4/23/2024 8:43:25 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Adware.AdPage.A
541

Bitdefender
Adware.AdPage.A
1.0.20.1120

Emsisoft Anti-Malware
Adware.AdPage
8.15.08.12.06

F-Secure
Adware.AdPage.A
11.2015-12-08_4

G Data
Adware.AdPage
15.8.22

IKARUS anti.virus
AdWare.AdPage
t3scan.2.2.29

MicroWorld eScan
Adware.AdPage.A
16.0.0.672

nProtect
Adware.AdPage.A
13.12.26.02

Reason Heuristics
PUP.InfoAtoms.Linksicle (M)
15.8.12.18

VIPRE Antivirus
Linksicle
24774

File size:
172 KB (176,168 bytes)

Product version:
1.8.1.0

Copyright:
Copyright (C) 2013

Original file name:
LinksicleClientIE.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Program Files\linksicle\ie\linksicleclientie.dll

Digital Signature
Signed by:
Linksicle

Authority:
GlobalSign nv-sa

Valid from:
5/15/2013 10:59:47 AM

Valid to:
5/16/2014 10:59:47 AM

Subject:
E=support@linksicle.com, CN=Linksicle, O=Linksicle, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11212949C7E0DD2DAE02FDADCB01A5928F0B

Registration
CLSID:
{2AD2D8CA-D24D-40D2-A8FC-46952409BA9A}

COM registered:
Yes

File PE Metadata
Compilation timestamp:
9/11/2013 4:10:19 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
3072:HxOvmPm2gDTo4if+1eejTqpyX/rF+c2l2tIR5KaVrVxA4Y1GQ:ROvUyDMbejTZXBsRwkBZQ

Entry address:
0xE674

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 6B, 53, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 03, 00, 00, 00, CC, CC, CC, 48, 8B, C4, 48, 89, 58, 20, 4C, 89, 40, 18, 89, 50, 10, 48, 89, 48, 08, 56, 57, 41, 56, 48, 83, EC, 50, 49, 8B, F0, 8B, DA, 4C, 8B, F1, BA, 01, 00, 00, 00, 89, 50, B8, 85, DB, 75, 0F, 39, 1D, 60, 9E, 01, 00, 75, 07, 33, C0, E9, D2, 00, 00, 00, 8D, 43, FF...
 
[+]

Entropy:
5.8650

Code size:
91 KB (93,184 bytes)

Remove LinksicleClientIE.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.