Suspicious process HASPLMS.EXE

Discussion in 'Prevx Releases' started by Jeroen1000, Feb 1, 2011.

Thread Status:
Not open for further replies.
  1. Jeroen1000

    Jeroen1000 Registered Member

    Joined:
    Aug 18, 2008
    Posts:
    162
    Hi Joe,

    I'm looking for some anwsers about this process. It is in the PrevX database here:
    http://spywarefiles.prevx.com/RRCFDA43292160/HASPLMS.EXE.html

    The one on my disk is exactly 1,757,696 bytes and is described as "Aladdin Knowledge Systems Ltd. " "Aladdin HASP License Manager Service".

    Its version number is "12.20.1.3886". It can be found at "C:\Windows\system32\hasplms.exe"

    Well, actually, the exact same info can be found on the PrevX webpage. Which why I think it is odd PrevX doesn't alert me.

    Some strange observations:

    1)PrevX on my computer does not flag this process as malicious
    2) it broadcasts a 40 byte payload using sourceport 49152 and destination port 1947

    Sorry if I made lots of typo's as it is very late over here now:))
     
  2. Triple Helix

    Triple Helix Specialist

    Joined:
    Nov 20, 2004
    Posts:
    12,622
    Location:
    Ontario, Canada
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.