home

plaxoinstall_en.exe

Plaxo Integration for Windows Mail, Windows Live Mail, and Outlook Express

Plaxo Incorporated

This is a setup program which is used to install the application. This is installed with Plaxo Toolbar for Windows. The file has been seen being downloaded from down.plaxo.com.
Publisher:
Plaxo, Inc.  (signed by Plaxo Incorporated)

Product:
Plaxo Integration for Windows Mail, Windows Live Mail, and Outlook Express

Description:
Enables Plaxo to integrate securely with Windows Mail, Windows Live Mail, and Outlook Express

Version:
3.35.0.5

MD5:
5f77f9e1deb2a4b44e2b641171af105c

SHA-1:
a1822e45d75f74d798772423481e17dc2fcf02e5

SHA-256:
5a45f2064a221cf63c81793348dcbab594ba6f645897aa9f3909e6855f172c96

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 5:53:42 AM UTC  (today)

File size:
10.2 MB (10,668,744 bytes)

Product version:
3.35.0.5

Copyright:
Copyright 2001-2012

Original file name:
PlaxoHelper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\plaxoinstall_en.exe

Digital Signature
Signed by:
Plaxo Incorporated

Authority:
VeriSign, Inc.

Valid from:
6/30/2011 2:00:00 AM

Valid to:
7/8/2012 1:59:59 AM

Subject:
CN=Plaxo Incorporated, OU=Engineering, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Plaxo Incorporated, L=Mountain View, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0F10485F97F4C9786D3773D2F196D99A

File PE Metadata
Compilation timestamp:
4/10/2012 8:55:28 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:KALzh1fsfpSgdEx3iE/Yt8RA6HmdxkzrbQfKhZDB8DFqgPlCwwiZdlwnYZ:RfsZCpiEugA6H6xEIfK7wFqOlHd3

Entry address:
0xA1578

Entry point:
E8, E7, 07, 01, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 68, 02, 00, 00, A1, 7C, BF, 5D, 00, 33, C5, 89, 45, FC, 53, 56, 8B, 75, 08, 33, DB, 57, 8B, 7D, 0C, 89, B5, A0, FD, FF, FF, 3B, F3, 75, 1C, E8, 92, 9E, FF, FF, 89, 18, E8, 78, 9E, FF, FF, C7, 00, 16, 00, 00, 00, E8, DA, 4B, 00, 00, E9, F2, 03, 00, 00, 3B, FB, 74, E0, 68, 08, 30, 58, 00, 56, E8, C1, 0D, 01, 00, 59, 59, 85, C0, 74, 16, E8, 4E, 9E, FF, FF, 6A, 02, 5E, 89, 30, E8, 57, 9E, FF, FF, 89, 30, E9, C7, 03, 00, 00, 80, 7E, 01, 3A, 75...
 
[+]

Entropy:
7.8904  (probably packed)

Code size:
1.4 MB (1,482,240 bytes)

The file plaxoinstall_en.exe has been discovered within the following program.

Plaxo Toolbar for Windows  by Plaxo Incorporated
Publisher's description - “With the Plaxo Toolbar for Internet Explorer, you'll always have your address book and calendar right at your fingertips. Yahoo! users can even get their address books synched with the Plaxo Network to always have the most up-to-date info right in their address books.”
58% remove it
 
Powered by Should I Remove It?

The file plaxoinstall_en.exe has been seen being distributed by the following URL.

http://down.plaxo.com/down2/outlook/.../PlaxoInstall_en.exe

Scan plaxoinstall_en.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.