» plx_exp.DLL
Overview
Analysis
File Details
Programs (1)

plx_exp.DLL

Plaxo Integration for Windows Mail, Windows Live Mail, and Outlook Express

Plaxo Incorporated

This is installed with Plaxo Toolbar for Windows.

File name:

plx_exp.DLL

Publisher:

Plaxo, Inc. (signed by Plaxo Incorporated)

Product:

Plaxo Integration for Windows Mail, Windows Live Mail, and Outlook Express

Description:

Enables Plaxo to integrate securely with Windows Mail, Windows Live Mail, and Outlook Express

Version:

3.23.0.18

MD5:

a4e5d91e80e54b3b0aea5fa411824480

SHA-1:

b7dcca5e8ae53e44d86e7938690ce4e1da120c87

SHA-256:

c7b0137e709812d2ae8b1fe56a55098f2e82667180224b4d7acffe4b6a5f6f30

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/25/2024 3:42:50 PM UTC (today)

File size:

471.9 KB (483,208 bytes)

Product version:

3.23.0.18

Original file name:

plx_exp.DLL

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\plaxo\3.23.0.18\plx_exp.dll

Digital Signature

Signed by:

Plaxo Incorporated

Authority:

VeriSign, Inc.

Valid from:

5/12/2009 5:00:00 PM

Valid to:

7/8/2010 4:59:59 PM

Subject:

CN=Plaxo Incorporated, OU=Engineering, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Plaxo Incorporated, L=Mountain View, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3CC50A5D4C240A6B7DF9F66485E2C911

File PE Metadata

Compilation timestamp:

12/23/2009 2:09:38 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

6144:jt5VA+4gArb+zDjkboE43RC97dvzDnEYTQYM9Yp5ylOu+61Juq:jtrA+HAuXj2of3RA7Fv+9A5ylOB61Juq

Entry address:

0x382ED

Entry point:

55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 85, F6, 75, 09, 83, 3D, C0, A9, 06, 22, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, B4, B0, 06, 22, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, 15, FF, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, 94, 8D, FC, FF, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, F1, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, E0, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D, 0C, 00... 
[+]

Entropy:

6.4417

Developed / compiled with:

Microsoft Visual C++ 6.0

Code size:

297 KB (304,128 bytes)

The file plx_exp.DLL has been discovered within the following program.

Plaxo Toolbar for Windows by Plaxo Incorporated

Publisher's description - “With the Plaxo Toolbar for Internet Explorer, you'll always have your address book and calendar right at your fingertips. Yahoo! users can even get their address books synched with the Plaxo Network to always have the most up-to-date info right in their address books.”

58% remove it

Scan plx_exp.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.