home

anchoroverlay.dll

Sync Shell Extension

eFolder, Inc.

It is registered as a context menu handler (displays a menu when right-clicked in Explorer) named “SyncedToolExt”.
Publisher:
eFolder  (signed by eFolder, Inc.)

Product:
Sync Shell Extension

Version:
2.5.2.1028 (117c1d7) (9d3480c)

MD5:
48ff93f49e311a0cbe71aee6c6ba0b58

SHA-1:
1b8dedb2a6cfe6f3f0ae341f194bacb5888b380d

SHA-256:
f62e2d16f8706668a6ec574d3147b7f5472fa82cdcb9820cb6a6a70543208aa7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/17/2024 6:10:48 PM UTC  (today)

File size:
2.2 MB (2,261,664 bytes)

Product version:
2.5.2.1028 (117c1d7) (9d3480c)

Copyright:
Copyright (C) 2015

Original file name:
anchoroverlay.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\synced tool\bin\anchoroverlay.dll

Digital Signature
Signed by:
eFolder, Inc.

Authority:
DigiCert Inc

Valid from:
7/16/2014 5:00:00 PM

Valid to:
9/18/2017 5:00:00 AM

Subject:
CN="eFolder, Inc.", O="eFolder, Inc.", L=Atlanta, S=Georgia, C=US, PostalCode=30341, STREET=2340 Perimeter Park Dr, STREET=Suite 100, SERIALNUMBER=169811, OID.1.3.6.1.4.1.311.60.2.1.2=Georgia, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization

Issuer:
CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
08BC3319F22FAF1A7C00F3F85FBC1D50

Registration
CLSIDs:
{113D0AEB-22E4-419D-B746-319FCAF60456}, {1C514AC9-A6B4-4692-A18E-9A2EE0B4E277}, {40D1DAA7-9CB5-4DB7-8610-A814EDB003A5}, {56E89524-684C-4352-B350-F97A7377DD64}, {5B05543A-73D8-4D80-97F9-13F471224DD8}, {C6B3FD8D-C629-4A7F-AF73-9ABB59AF029D}

COM registered:
Yes

File PE Metadata
Compilation timestamp:
11/11/2016 12:12:21 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
49152:02uvWoNvE50v4l8F8Y1zaPZXWtRsXmIkz:0951E50v4KrvV

Entry address:
0x12DD15

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 5E, 0A, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 10, 68, 20, 10, 19, 10, E8, 1C, 08, 00, 00, 33, C0, 40, 8B, F0, 89, 75, E4, 33, DB, 89, 5D, FC, 8B, 7D, 0C, 89, 3D, 50, 7D, 19, 10, 89, 45, FC, 85, FF, 75, 0C, 39, 3D, 50, 3A, 1A, 10, 0F, 84, D4, 00, 00, 00, 3B, F8, 74, 05, 83, FF, 02, 75, 38, A1, D8, 95, 17, 10, 85, C0, 74, 0E, FF, 75, 10, 57, FF, 75, 08, FF, D0, 8B, F0, 89, 75, E4, 85, F6, 0F, 84, B1, 00, 00, 00...
 
[+]

Entropy:
6.3331

Developed / compiled with:
Microsoft Visual C++

Code size:
1.2 MB (1,285,120 bytes)

Context Menu Handler
Display name:
SyncedToolExt

CLSID:
{113D0AEB-22E4-419D-B746-319FCAF60456}

CLSID name:
SyncedToolExt


Scan anchoroverlay.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.