» ShellExt.dll
Overview
Analysis
File Details
Behaviors (1)

ShellExt.dll

4sync Inc.

File name:

ShellExt.dll

Publisher:

4sync Inc. (signed and verified)

Version:

1.0.6.0

MD5:

ec22fddd0498a654824f2a89358e1241

SHA-1:

01a38a3b6b55ac40cf15b1dcd063e1131cc95958

SHA-256:

79d6c1842dc76b25e621c71b185d1d3751d2eab31a0321e5416d1fff4201668e

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 7:06:19 PM UTC (today)

File size:

1.9 MB (1,986,520 bytes)

Product version:

1.0.0.0

File type:

Dynamic link library (Win64 DLL)

Common path:

C:\Program Files\4sync\shellext.dll

Digital Signature

Signed by:

4sync Inc.

Authority:

GoDaddy.com, Inc.

Valid from:

10/22/2013 3:56:47 AM

Valid to:

10/22/2016 3:56:47 AM

Subject:

CN=4sync Inc., O=4sync Inc., L=San Francisco, S=California, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

4B26471C28D70E

Registration

CLSIDs:

{2012DE06-50C0-48BD-ACDE-88F95D4CAD1F}, {C72C6188-BEF2-46E5-A89A-52F0ED75219E}, {C92F6BC2-AF61-4C0E-80E0-939B8282DDB7}, {CB1EFEF8-D5E0-49D1-B768-41B48B1D7803}

COM registered:

Yes

File PE Metadata

Compilation timestamp:

5/29/2014 3:18:01 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:Zjw+n8radDja8rZt2VVU0ZU/zCPpboyWbY2TGhMfZnYmS1iYbpgZBCznyxHaOdgJ:ZCadZ2o7/fiiYAQWBgFb

Entry address:

0x18B8B0

Entry point:

55, 48, 81, EC, 90, 00, 00, 00, 48, 8B, EC, 48, 89, 4D, 30, 89, 55, 3C, 4C, 89, 45, 40, 90, 48, 8D, 4D, 48, 48, 8D, 15, 96, 66, FF, FF, 4C, 8B, 45, 30, 44, 8B, 4D, 3C, 48, 8B, 45, 40, 48, 89, 44, 24, 20, E8, D8, 9B, E8, FF, E8, C3, 26, E8, FF, C7, 85, 8C, 00, 00, 00, 01, 00, 00, 00, EB, 17, 90, 90, E8, F0, 28, E8, FF, 85, C0, 0F, 94, C0, 48, 0F, B6, C0, 89, 85, 8C, 00, 00, 00, 90, 8B, 85, 8C, 00, 00, 00, 48, 8D, A5, 90, 00, 00, 00, 5D, C3, 90, 48, 83, EC, 28, E8, 57, 1C, E8, FF, 48, 83, C4, 28, C3, CC, CC... 
[+]

Code size:

1.5 MB (1,616,384 bytes)

Approved Shell Extension

Name:

Icon Overlay Shell Extension

CLSID:

{2012DE06-50C0-48BD-ACDE-88F95D4CAD1F}

CLSID name:

Icon Overlay Shell Ok

Scan ShellExt.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.