adxloader64.dll

Scan adxloader64.dll - Powered by Reason Core Security
Version:
6, 3, 3052, 0

MD5:
0005ebf807c0b023004cf75d3f189880

SHA-1:
d305bf156502e40c2206077a436b3cfeab614963

SHA-256:
129c881f2cb11e1d998371ab21916057e6ddab3ad7b4cc4db6df82cf57618fba

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/6/2016 7:15:30 AM UTC  (today)

File size:
663.5 KB (679,424 bytes)

Product version:
6, 3, 3052, 0

Original file name:
ADXAddinLoaderShim.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\connectwise\connectwise outlook 2010 add-in\adxloader64.dll

Registration
CLSID:
{819C1E05-EB3C-4F87-8186-359C47BF4C1B}

ProgID:
CWOutlookAddIn2010.AddinModule

COM registered:
Yes

File PE Metadata
Compilation timestamp:
12/1/2010 7:17:24 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:Ak0sxHJyzO5dIHFyUKBlMOkeESRT6rUB24cePH:txHJyzkdmyGOkeESRT6ra2PS

Entry address:
0x557F0

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 83, FA, 01, 49, 8B, F8, 8B, DA, 48, 8B, F1, 75, 05, E8, 1F, DC, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 83, FE, FF, FF, CC, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 48, 8D, 59, 1C, 48, 8B, F1, BF, 01, 01, 00, 00, 48, 8B, CB, 4C, 8B, C7, 33, D2, E8, 78, C3, FF, FF, 45, 33, DB, 4C, 8D, 05, EE, 63, 04, 00, 44, 89, 5E, 04, 44, 89, 5E, 08, 44, 89, 5E, 0C, 4C, 89...
 
[+]

Entropy:
6.1063

Code size:
447 KB (457,728 bytes)

The file adxloader64.dll has been discovered within the following programs.

TurboLaw Toolbar for Microsoft Excel  by Promethean Software Corporation
www.turbolaw.com
About 17% of users remove it
Winshuttle RUNNER  by Winshuttle, LLC.
Publisher's description - “Winshuttle Runnerâ„¢ enables companies to implement a desktop solution that helps make SAP simpler to use for casual SAP users. Employees can enter and extract SAP data through an Excel add-in or desktop application, yet all SAP security and data validation rules still apply.”
www.winshuttle.com/products/runner
10% remove it
Winshuttle TRANSACTION  by Winshuttle, LLC.
www.winshuttle.com
About 4% of users remove it
 
Powered by Should I Remove It?

Scan adxloader64.dll - Powered by Reason Core Security