Should I block it?
40% of PCs block this file from running.
Possible reason:
Performance resource utilization
Relationships
 PE file structure
|
Show functions |
Import table
mscoree.dll
DllMain
synclib.engine.exe
SyncLib by Bandoo Media Inc (Signed)
| Version: | 1.5.0.0 |
| MD5: | e11eb973cc14539e7077318e4a1b5ea2 |
| SHA1: | 4308af35cb936713bd3194d98b64af4993ee265d |
| SHA256: | 432c890ade9c5cd278bf5d2611f0a140e30d2059020255a546d55c03db2cd988 |
Overview
synclib.engine.exe runs as a service under the name SyncLibEngine with extensive SYSTEM privileges (full administrator access). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Bandoo Media Inc which was issued by the Thawte certificate authority (CA). This particular version is usually found on Microsoft Windows XP (5.1.2600.196608).
Details
| File name: | synclib.engine.exe |
| Publisher: | SyncLib |
| Product name: | SyncLib |
| Description: | EngineRunner rev.229 |
| Typical file path: | C:\Program Files\synclib\synclib.engine.exe |
| Original name: | SyncLib.EngineRunner.exe |
| File version: | 1.5.0.0 |
| Size: | 29.39 KB (30,096 bytes) |
| Certificate |
| Issued to: | Bandoo Media Inc |
| Authority (CA): | Thawte |
| Effective date: | Thursday, June 10, 2010 |
| Expiration date: | Sunday, June 10, 2012 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Network connections
[TCP] ec2-174-129-245-24.compute-1.amazonaws.com (174.129.245.24:443)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00130392% | |
| Kernel CPU: | 0.00085981% | |
| User CPU: | 0.00044412% | |
| Kernel CPU time: | 135,625 ms/min | |
| Context switches: | 9/sec | |
| Memory |
| Private memory: | 31.47 MB | |
| Private (maximum): | 33.86 MB | |
| Private (minimum): | 10.11 MB | |
| Non-paged memory: | 31.47 MB | |
| Virtual memory: | 175.16 MB | |
| Virtual memory (peak): | 178.16 MB | |
| Working set: | 10.43 MB | |
| Working set (peak): | 33.88 MB | |
| Resource allocations |
| Threads: | 19 | |
| Handles: | 1124 | |
| GUI GDI count: | 10 | |
| GUI USER count: | 12 | |
Process properties
| Integrety level: | Undefined |
| Platform: | 32-bit |
| Command line: | "C:\Program Files\synclib\synclib.engine.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | SyncLibEngine |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (by Microsoft) |
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
100.00% |
|
