» ShellExt.dll
Overview
Analysis
File Details

ShellExt.dll

4sync Inc.

File name:

ShellExt.dll

Publisher:

4sync Inc. (signed and verified)

Version:

1.0.6.0

MD5:

b3047b0014fae90828a7f45c3c32df38

SHA-1:

d2f885b1f994fe184f2222ffb226892192693dc7

SHA-256:

7f80a0fea73bd8464228a79473d8fd38fa958dd84285d31be60e3bf4c5e62556

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 10:08:04 PM UTC (today)

File size:

1.9 MB (1,989,592 bytes)

Product version:

1.0.0.0

File type:

Dynamic link library (Win64 DLL)

Common path:

C:\Program Files\4sync\shellext.dll

Digital Signature

Signed by:

4sync Inc.

Authority:

GoDaddy.com, Inc.

Valid from:

10/22/2013 6:56:47 AM

Valid to:

10/22/2016 6:56:47 AM

Subject:

CN=4sync Inc., O=4sync Inc., L=San Francisco, S=California, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

4B26471C28D70E

Registration

CLSIDs:

{2012DE06-50C0-48BD-ACDE-88F95D4CAD1F}, {C72C6188-BEF2-46E5-A89A-52F0ED75219E}, {C92F6BC2-AF61-4C0E-80E0-939B8282DDB7}, {CB1EFEF8-D5E0-49D1-B768-41B48B1D7803}

COM registered:

Yes

File PE Metadata

Compilation timestamp:

7/18/2014 5:10:47 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:MECqNrbrRgKXY8dZoxyEQ5IgzC/5r4Zmn+yvt9lxPEt+MHc4cKUqD/JvlRJLlFvY:MXKgRMkVhEHc4xUaNnF+

Entry address:

0x18C0C0

Entry point:

55, 48, 81, EC, 90, 00, 00, 00, 48, 8B, EC, 48, 89, 4D, 30, 89, 55, 3C, 4C, 89, 45, 40, 90, 48, 8D, 4D, 48, 48, 8D, 15, 96, 66, FF, FF, 4C, 8B, 45, 30, 44, 8B, 4D, 3C, 48, 8B, 45, 40, 48, 89, 44, 24, 20, E8, C8, 93, E8, FF, E8, B3, 1E, E8, FF, C7, 85, 8C, 00, 00, 00, 01, 00, 00, 00, EB, 17, 90, 90, E8, E0, 20, E8, FF, 85, C0, 0F, 94, C0, 48, 0F, B6, C0, 89, 85, 8C, 00, 00, 00, 90, 8B, 85, 8C, 00, 00, 00, 48, 8D, A5, 90, 00, 00, 00, 5D, C3, 90, 48, 83, EC, 28, E8, 47, 14, E8, FF, 48, 83, C4, 28, C3, CC, CC... 
[+]

Entropy:

5.9845

Code size:

1.5 MB (1,618,432 bytes)

Scan ShellExt.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.