home

sync-worker.exe

Sync.com Inc.

Publisher:
Sync.com Inc.  (signed and verified)

MD5:
4f51bbe63b583a06bdc4e116e668a456

SHA-1:
6ca25ee46ce0b53d8a2414ef305405436f93bb48

SHA-256:
9d5c30ab89706f4a844734276cff790eeb4e09bd7f019829f8dd7144d075c453

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/3/2024 8:19:09 PM UTC  (today)

File size:
4.6 MB (4,826,296 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\sync\sync-worker.exe

Digital Signature
Signed by:
Sync.com Inc.

Authority:
COMODO CA Limited

Valid from:
6/29/2014 1:00:00 AM

Valid to:
6/29/2016 12:59:59 AM

Subject:
CN=Sync.com Inc., OU=Development, O=Sync.com Inc., STREET="7030 Woodbine Ave., Suite 900", L=Markham, S=Ontario, PostalCode=L3R6G2, C=CA

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00D793243CD0E1E7A55308F6F31982F4C1

File PE Metadata
Compilation timestamp:
11/11/2015 1:15:29 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
49152:/uf4Y7CDtTCLEQrq+iziVan+2Z5akpK0zpHpw8lqM2+/9MW3MfkT/Ajpn0upAKBp:/MN7CDB+fanDa78lf29W3M96yz

Entry address:
0x1700B5

Entry point:
E8, 25, 74, 00, 00, E9, 95, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 20, 02, 00, 00, A1, 10, 3F, 86, 00, 33, C5, 89, 45, FC, 8B, 45, 08, 83, A5, E0, FD, FF, FF, 00, 83, 8D, E4, FD, FF, FF, FF, 56, 8D, B5, E8, FD, FF, FF, 85, C0, 75, 20, E8, 08, 27, 00, 00, 83, 20, 00, E8, ED, 26, 00, 00, C7, 00, 16, 00, 00, 00, E8, E6, 77, 00, 00, 83, C8, FF, E9, CE, 00, 00, 00, 53, 57, 50, FF, 15, 48, 41, 68, 00, 85, C0, 0F, 84, 98, 00, 00, 00, 8D, 85, E8, FD, FF, FF, 50, 68, 05, 01, 00, 00, FF, 15, 44, 41, 68, 00, 8B, F8...
 
[+]

Entropy:
6.4953

Code size:
2.5 MB (2,632,704 bytes)

Scan sync-worker.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.