home

paul.dll

SecuROM Activate & Play

ATARI Europe

Publisher:
Sony DADC Austria AG  (signed by ATARI Europe)

Product:
SecuROM Activate & Play

Description:
SecuROM PA Unlock DLL for Activate & Play

Version:
1.0.1.10

MD5:
cee5a0b076242c8abf6512c285b992a0

SHA-1:
88f362d98bed8faa6e3c07c3fd7ea476da7bfbd4

SHA-256:
b7183127cc0ba6ebe64af145db92fe2a839bb0921f61ba14bf3fb91ff3e77de5

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/20/2024 2:11:29 PM UTC  (today)

Scan engine
Detection
Engine version

Norman
Heuristic_Anomaly.A
11.20140125

File size:
847.7 KB (868,080 bytes)

Product version:
1.0.1.10

Copyright:
© 2006 Sony DADC Austria AG. All rights reserved.

Original file name:
paul_dll_activate_and_play.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\rockstar games\grand theft auto iv\paul.dll

Digital Signature
Signed by:
ATARI Europe

Authority:
VeriSign, Inc.

Valid from:
8/20/2007 3:00:00 AM

Valid to:
8/20/2009 2:59:59 AM

Subject:
CN=ATARI Europe, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ATARI Europe, L=Lyon, S=Rhone, C=FR

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
41341C5C6C8B2CD4F84DCDD9FACAB77B

File PE Metadata
Compilation timestamp:
5/16/2008 9:50:26 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:q9UOJ28EYuddAeGKFqJgMG+TO2yD97tYG0KELuD8WKFns7:RO3qGoq6d+TOP7t4dqk

Entry address:
0x2ED5B

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 08, 01, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.1520

Code size:
183.5 KB (187,904 bytes)

The file paul.dll has been discovered within the following programs.

BoneTown  by DWC Software
www.bonetown.com
About 2% of users remove it
Rockstar Games Social Club  by Rockstar Games Inc.
Rockstar Games Social Club is a free online service provided by Rockstar Games for use with their latest generation of games. Rockstar Games Social Club provides certain different features based on the type of game. Allows users to find tracks created by the community.
socialclub.rockstargames.com
9% remove it
Trials Evolution Gold Edition  by Ubisoft
Publisher's description - “Trials Evolution: Gold Edition marks the Trials franchise’s triumphant return to the PC gaming platform. RedLynx’s signature franchise, the Trials series first made its mark in gaming with the 2008 release of Trials 2 SE for the PC.”
support.ubi.com
7% remove it
Ultimate Vehicle Pack v11 for "Grand Theft Auto IV"  by ZZCOOL
About 5% of users remove it
 
Powered by Should I Remove It?

The file paul.dll has been seen being distributed by the following 4 URLs.

https://docs.google.com/uc?authuser=0&id=0BwQHkY8w95gFbTN4R1lLanEzNzA&export=download

about:internet

https://downloader-ams1.disk.yandex.com.tr/rdisk/414e4b46c584c7c34148c6a84eb25a82/54010967/K12VNImLdFYmMuig4ZS_WYFgwKyySRocBNzdMALOSC_YWrs2rfiEezg_E3TzQ2SW2hx6oGsdZzT5Zvf3BWk_uQ==?uid=0&filename=paul.dll&disposition=attachment&hash=gzMPDLC0lYUZK03ZX4sqLy77bR8JrCygLdv4nuGYxDY=:/.../x-msdownload&fsize=868080&hid=8ec21915a9539b57006ae4658425fc22&media_type=executable&rtoken=d4e916838efc7dadfdd39bb6144dbc44&rtimestamp=5400d128&force_default=no

https://downloader.disk.yandex.com.tr/disk/414e4b46c584c7c34148c6a84eb25a82/54010967/K12VNImLdFYmMuig4ZS_WYFgwKyySRocBNzdMALOSC_YWrs2rfiEezg_E3TzQ2SW2hx6oGsdZzT5Zvf3BWk_uQ==?uid=0&filename=paul.dll&disposition=attachment&hash=gzMPDLC0lYUZK03ZX4sqLy77bR8JrCygLdv4nuGYxDY=:/.../x-msdownload&fsize=868080&hid=8ec21915a9539b57006ae4658425fc22&media_type=executable

Scan paul.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.