home

advtimesync.exe

Advanced Time Synchronizer

Vadim Belov

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Advanced Time Synchronizer’.
Publisher:
Southsoftware.com  (signed by Vadim Belov)

Product:
Advanced Time Synchronizer

Version:
4.2.0.805

MD5:
531b7d3d0d42e3b8b0b8fef9bc8d8973

SHA-1:
ec2dea9feac160aafcf30b4abd52be599075bce2

SHA-256:
09e7ae1cabc9e332ad7ddbbec34657d4d99f267a429710101676f38092f07484

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 4:59:47 AM UTC  (today)

File size:
1.7 MB (1,763,360 bytes)

Product version:
4.2.0.805

Copyright:
Copyright © Southsoftware.com, 2002-2015

Original file name:
advtimesync.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\advanced time synchronizer\advtimesync.exe

Digital Signature
Signed by:
Vadim Belov

Authority:
COMODO CA Limited

Valid from:
7/11/2013 2:00:00 AM

Valid to:
7/12/2018 1:59:59 AM

Subject:
CN=Vadim Belov, O=Vadim Belov, STREET=PO Box 375, L=Saratov, S=Saratov, PostalCode=410012, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00A50CBEC6E7120C24420A18CD3F0B3EAE

File PE Metadata
Compilation timestamp:
12/18/2014 10:36:17 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
83.82

Entry address:
0x9A280

Entry point:
48, 83, EC, 28, E8, 17, 6E, FF, FF, 48, 83, C4, 28, E9, 0E, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 40, 53, 48, 83, EC, 20, 48, 83, F9, E0, 48, 8B, D9, 0F, 87, 9B, 00, 00, 00, 48, 89, 74, 24, 30, 48, 85, C9, BE, 01, 00, 00, 00, 48, 0F, 45, F1, 48, 89, 7C, 24, 38, 66, 66, 90, 66, 66, 66, 90, 48, 8B, 0D, 89, 68, 03, 00, 48, 85, C9, 75, 20, E8, CF, 1F, 00, 00, B9, 1E, 00, 00, 00, E8, 85, 1D, 00, 00, B9, FF, 00, 00, 00, E8, 6B, DD, FF, FF, 48, 8B, 0D, 64, 68, 03, 00, 4C, 8B, C6, 33...
 
[+]

Code size:
152 KB (155,648 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Advanced Time Synchronizer

Command:
"C:\Program Files\advanced time synchronizer\advtimesync.exe" noshow


Scan advtimesync.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.