Suspicious process HASPLMS.EXE

Discussion in 'Prevx Releases' started by Jeroen1000, Feb 1, 2011.

Thread Status:
Not open for further replies.
  1. Jeroen1000

    Jeroen1000 Registered Member

    Joined:
    Aug 18, 2008
    Posts:
    162
    Hi Joe,

    I'm looking for some anwsers about this process. It is in the PrevX database here:
    http://spywarefiles.prevx.com/RRCFDA43292160/HASPLMS.EXE.html

    The one on my disk is exactly 1,757,696 bytes and is described as "Aladdin Knowledge Systems Ltd. " "Aladdin HASP License Manager Service".

    Its version number is "12.20.1.3886". It can be found at "C:\Windows\system32\hasplms.exe"

    Well, actually, the exact same info can be found on the PrevX webpage. Which why I think it is odd PrevX doesn't alert me.

    Some strange observations:

    1)PrevX on my computer does not flag this process as malicious
    2) it broadcasts a 40 byte payload using sourceport 49152 and destination port 1947

    Sorry if I made lots of typo's as it is very late over here now:))
     
  2. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,012
    Location:
    Ontario, Canada
Thread Status:
Not open for further replies.