Syncreg.dll
Microsoft Synchronization Framework Registration file version info
Library on Windows 2 known copies with hashes
Is it the real Syncreg.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Synchronization Framework, Microsoft Corporation
DescriptionMicrosoft Synchronization Framework Registration
2 known copies
10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\Syncreg.dll · signed by Microsoft Windows
4892c38d2bdb3a8f1aba9dbf338ddc4661ad4a4ad420cc369407b225cb7a514d10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\Syncreg.dll · signed by Microsoft Windows
ea8152f4576979c4a89246988c7635a3ec5a76a675fffb751580344c5f2177b6From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.