home

syncbeta.exe

The number one mod downloader and enabler for your favorite game

Six Networks GmbH

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘syncbeta’.
Publisher:
Six Networks GmbH  (signed and verified)

Product:
The number one mod downloader and enabler for your favorite game

Version:
1.0.1292.2

MD5:
0fef78c5992cf4ed114ff491edf4e3f2

SHA-1:
41929756edc5b6c37ee529fa27d76038845dea1a

SHA-256:
91a7bf916ff51e91b21892af34c1bc835f58d08f3edc92be86490e2cd017aeb7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/13/2025 7:35:27 AM UTC  (today)

File size:
31.5 MB (33,058,640 bytes)

Product version:
1.0.1292.2

Copyright:
Copyright © 2016 SIX Networks GmbH

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\ProgramData\squirrelmachineinstalls\syncbeta.exe

Digital Signature
Signed by:
Six Networks GmbH

Authority:
COMODO CA Limited

Valid from:
1/14/2014 12:00:00 AM

Valid to:
1/14/2016 11:59:59 PM

Subject:
CN=Six Networks GmbH, O=Six Networks GmbH, STREET=Heimgartenstr.15, L=Starnberg, S=Bavaria, PostalCode=82319, C=DE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
60CC61BFBDAF460B6830D1C9D08A6F81

File PE Metadata
Compilation timestamp:
11/6/2015 5:00:49 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0xAD5E

Entry point:
E8, 48, 66, 00, 00, E9, 7F, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 7F, 0F, B6, 44, 24, 08, 0F, BA, 25, 44, 99, 42, 00, 01, 73, 0D, 8B, 4C, 24, 0C, 57, 8B, 7C, 24, 08, F3, AA, EB, 5D, 8B, 54, 24, 0C, 81, FA, 80, 00, 00, 00, 7C, 0E, 0F, BA, 25, 04, 84, 42, 00, 01, 0F, 82, 7F, 67, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0, 10, 03, C1, 8B, CA, 83...
 
[+]

Entropy:
7.9992  (probably packed)

Code size:
109.5 KB (112,128 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
syncbeta

Command:
C:\ProgramData\squirrelmachineinstalls\syncbeta.exe --checkinstall


Scan syncbeta.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.