» PLSERIAL.dll
Overview
Analysis
File Details
Behaviors (1)

PLSERIAL.dll

Alchemex

Alchemex (Pty) Ltd

File name:

PLSERIAL.dll

Publisher:

Alchemex (Pty) Ltd (signed and verified)

Product:

Alchemex

Version:

6.08.0205

MD5:

1b6d77bbfe9804a2de0bfcd1874963b6

SHA-1:

ffdf4575be0fb9f8f78f76799de54f422c14424e

SHA-256:

2e3a857366e67df2743e394a4eca027266e704d361c059543c3749abbdfbe31c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 9:58:09 PM UTC (today)

File size:

980.7 KB (1,004,280 bytes)

Product version:

6.08.0205

Original file name:

PLSERIAL.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\common files\bicomponents\plserial.dll

Digital Signature

Signed by:

Alchemex (Pty) Ltd

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

8/8/2007 7:00:00 AM

Valid to:

8/8/2009 6:59:59 AM

Subject:

CN=Alchemex (Pty) Ltd, OU=Development, O=Alchemex (Pty) Ltd, L=Durban, S=Kwazulu Natal, C=ZA

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

476BD894FCBBA5F737CE303EEA4A7586

Registration

CLSIDs:

{04017611-5E6A-4C4A-BA86-BEE26F7BAF57}, {52312870-1827-4ADF-9ED4-13DF28BF4986}, {91034D72-F5B8-458E-9348-A1A7D91D7C5A}, {C02073DF-6F00-4F5F-8441-F1821EC793AC}, {D0E38AE5-38C5-4A4D-B450-60CD7474892F}, {E8A18C9D-63F7-4CD6-85B1-1CE86665976D}

ProgIDs:

PLSERIAL.PLBranding, PLSERIAL.PLCompany, PLSERIAL.PLCommunityType, PLSERIAL.PLLicence, PLSERIAL.PLDownloader, PLSERIAL.PLDownloadReps

COM registered:

Yes

File PE Metadata

Compilation timestamp:

5/12/2009 1:37:43 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

6144:gznbbSpFCinb0UBWKCmAPbYFO+iQZx+tRcrnvD+APiOSJcn16DYauFHT4eGQshs5:gDonbhnAPbYd8C7+AM2FzeQshs0Q8wOC

Entry address:

0x5A30

Entry point:

5A, 68, C0, DE, 0D, 11, 68, C4, DE, 0D, 11, 52, E9, E9, FF, FF, FF, 00, 00, 00, 48, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 98, 55, ED, 3F, D0, 1F, 6C, 40, 91, 7A, C8, 9E, C5, E9, 0B, E0, 00, 00, 00, 00, 00, 00, 03, 00, 05, 00, 5C, 53, 79, 73, 74, 65, 50, 4C, 53, 45, 52, 49, 41, 4C, 00, 64, 6F, 32, 36, 2E, 74, 6C, 00, 23, 4D, 69, 63, 72, 6F, 73, F0, 00, 00, 00, 90, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 30, 00, 00, 00, 70, 28, 31, 52, 27, 18, DF, 4A, 9E, D4, 13, DF, 28, BF, 49, 86... 
[+]

Entropy:

5.8897

Developed / compiled with:

Microsoft Visual Basic v6.0

Code size:

860 KB (880,640 bytes)

Automation Object

CLSID:

{04017611-5E6A-4C4A-BA86-BEE26F7BAF57}

CLSID name:

PLSERIAL.PLBranding

Scan PLSERIAL.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.