» PTA.DLL
Overview
Analysis
File Details
Programs (1)

PTA.DLL

PTA Module

Alipay.com Co.,Ltd

This is installed with Alipay security control 2,4,0,1.

File name:

PTA.DLL

Publisher:

Alipay.com Co.,Ltd (signed and verified)

Product:

PTA Module

Version:

2, 5, 1, 509

MD5:

ec3222db81694fb9bd4f348d7fa01476

SHA-1:

82e1659a93e65e04bb2f5c13b11aaf441e2ea312

SHA-256:

78b2b34fe09c9d36bd230cbbbb5cf0b6f0fa71bedad2852695c7764017d6fd45

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 9:45:09 AM UTC (today)

File size:

53.9 KB (55,184 bytes)

Product version:

2, 5, 1, 509

Original file name:

PTA.DLL

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\pta.dll

Digital Signature

Signed by:

Alipay.com Co.,Ltd

Authority:

VeriSign, Inc.

Valid from:

2/18/2009 8:00:00 AM

Valid to:

3/21/2010 7:59:59 AM

Subject:

CN="Alipay.com Co.,Ltd", OU=Alipay Ops, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Alipay.com Co.,Ltd", L=Hangzhou, S=Zhejiang, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

11F729C2E9A302432A0B5BB498C5502D

File PE Metadata

Compilation timestamp:

2/10/2007 1:21:50 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

1536:KNGkWZZHVQzCYXfjH8Cf8dcy/0sAPCQ9B:8GvjHVQzCQH8ReycFCw

Entry address:

0x1BA80

Entry point:

80, 7C, 24, 08, 01, 0F, 85, C2, 01, 00, 00, 60, BE, 00, 40, 01, 10, 8D, BE, 00, D0, FE, FF, 57, 83, CD, FF, EB, 0D, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB... 
[+]

Entropy:

7.2667

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 - v1.22, 0x

Code size:

32 KB (32,768 bytes)

The file PTA.DLL has been discovered within the following program.

Alipay security control 2,4,0,1 by Alipay.com Co.,Ltd

Publisher's description - “Alipay Security Control provide stable, security, convenient service when you login or pay the money in the Alipay website, make your shopping safe in internet. Right now, www.alipay.com only support Chinese.”

www.alipay.com

About 1% of users remove it

Scan PTA.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.