home

Synch.exe

Synch

GoFrugal Technologies Pvt Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘RayMedi Hot Sync - Auto push’.
Publisher:
GoFrugal Technologies  (signed by GoFrugal Technologies Pvt Ltd)

Product:
Synch

Version:
1.00

MD5:
dcc02a164ebe91be77463b2b921e38e0

SHA-1:
b9653880e202d520b8df69aa91268dfe6bada10a

SHA-256:
bd626e73a2f2a087fd353910d226be782fa643ab134cf9830bdfe8237c47dfee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/15/2025 12:51:49 PM UTC  (today)

File size:
283.8 KB (290,600 bytes)

Product version:
1.00

Original file name:
Synch.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\raymedi rpos6\synch.exe

Digital Signature
Signed by:
GoFrugal Technologies Pvt Ltd

Authority:
The USERTRUST Network

Valid from:
1/13/2011 5:30:00 AM

Valid to:
1/13/2013 5:29:59 AM

Subject:
CN=GoFrugal Technologies Pvt Ltd, O=GoFrugal Technologies Pvt Ltd, STREET=13A/209 Kashyap Envalve, STREET=Velachery Main Road, STREET=Velachery, L=Chennai, S=TamilNadu, PostalCode=600042, C=IN

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00E976138FAC3D3FB19140AD56B7A81CDF

File PE Metadata
Compilation timestamp:
3/22/2011 1:13:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x20A0

Entry point:
68, 7C, 25, 42, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, 33, 0F, D4, 1C, 15, 29, 01, 47, 86, EF, 13, F2, E2, D1, E3, C0, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 53, 79, 6E, 63, 72, 6F, 00, 00, 00, 00, 00, 00, FF, CC, 31, 00, 0E, 13, 3F, 9B, F8, 21, 3E, 31, 4E, A7, 02, 39, F0, 3E, CB, 91, FE, 85, 23, 7B, 64, 6B, BA, 29, 4E, 8A, 3A, 89, 23, 78, D1, 20, 8B, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00, AA, 00, 60, D3, 93, 00, 00, 00...
 
[+]

Entropy:
4.9210

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
260 KB (266,240 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
RayMedi Hot Sync - Auto push

Command:
"C:\Program Files\raymedi rpos6\synch.exe" \verbose=silent \start=minimize


Scan Synch.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.