How to remove Sync.exe
Sync.exe
The module Sync.exe has been detected as PUP.WinThruster
File Details
| Product Name: | WinThruster |
| Company Name: | Solvusoft Corporation |
| MD5: | 10b08d67ef609f82db9e28bf13dea2af |
| Size: | 432 KB |
| First Published: | 2017-05-22 11:21:58 (8 years ago) |
| Latest Published: | 2024-07-23 23:01:40 (11 months ago) |
| Status: | PUP.WinThruster (on last analysis) | |
| Analysis Date: | 2024-07-23 23:01:40 (11 months ago) |
Overview
| Signed By: | Installer Wizard |
| Status: | Valid |
Common Places:
| %commonappdata%\miadb8b.tmp\data\offline\145e9a7c\252eeb5f |
| %commonappdata%\{4b36989f-be86-4a21-94b1-ac154a69ea65}\offline\145e9a7c\252eeb5f |
| %programfiles%\solvusoft\winthruster |
| %commonappdata%\miaaea6.tmp\data\offline\145e9a7c\252eeb5f |
| %commonappdata%\miac8c2.tmp\data\offline\145e9a7c\252eeb5f |
| %commonappdata%\miaf0fc.tmp\data\offline\145e9a7c\252eeb5f |
| %sysdrive%\adwcleaner\quarantine\1xvpfvjcrg\offline\145e9a7c\252eeb5f |
| %sysdrive%\adwcleaner\quarantine\files\czzixwjbiwtnnzomqbloefzvzlqgniyw\winthruster |
| %sysdrive%\adwcleaner\quarantine\gxix4a2dre\winthruster |
| %commonappdata%\miae350.tmp\data\offline\145e9a7c\252eeb5f |
Geography:
| Taiwan | 36.3% | |
| Russia | 6.7% | |
| Turkey | 5.5% | |
| Poland | 5.5% | |
| South Korea | 5.3% | |
| Italy | 4.0% | |
| Czech Republic | 4.0% | |
| Brazil | 3.8% | |
| Saudi Arabia | 3.4% | |
| Hong Kong | 2.5% | |
| Zambia | 2.3% | |
| United States | 2.1% | |
| Egypt | 2.1% | |
| Mexico | 1.7% | |
| Ukraine | 1.5% | |
| France | 1.3% | |
| Belarus | 1.1% | |
| India | 0.8% | |
| Slovakia | 0.8% | |
| Spain | 0.8% | |
| Bolivia | 0.8% | |
| Germany | 0.6% | |
| Romania | 0.6% | |
| Nicaragua | 0.6% | |
| Syria | 0.6% | |
| Netherlands | 0.4% | |
| Algeria | 0.4% | |
| South Africa | 0.4% | |
| Slovenia | 0.4% | |
| Argentina | 0.4% | |
| Israel | 0.4% | |
| Philippines | 0.2% | |
| Sweden | 0.2% | |
| Australia | 0.2% | |
| Kuwait | 0.2% | |
| Croatia | 0.2% | |
| Japan | 0.2% | |
| Puerto Rico | 0.2% | |
| Vietnam | 0.2% | |
| Jordan | 0.2% | |
| Belgium | 0.2% | |
| Hungary | 0.2% | |
| Austria | 0.2% | |
| Uruguay | 0.2% |
OS Version:
| Windows 7 | 62.4% | |
| Windows 10 | 29.4% | |
| Windows 8.1 | 6.3% | |
| Windows Vista | 1.1% | |
| Windows 8 | 0.8% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 64 |
| Image Base: | 0x0000000140000000 |
| Entry Address: | 0x0002cba0 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 297472 | b9c1f66ca88d1d9522a7676d139fe34c |
| .rdata | 90112 | 43005e760b27cd728835400453e56d73 |
| .data | 12800 | c09d774b4e64a7181fde77c844ca4ae0 |
| .pdata | 21504 | c6ff7a561a072362592e12279ce17061 |
| .rsrc | 2048 | 9f54074d78d179b2a59e406df64a6448 |
| .reloc | 11776 | f6f1bec63567a43bff11527726d174f2 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for Sync.exe
