home

msusvc.exe

@MAX SyncUp

Maxim Deminov

It runs as a separate (within the context of its own process) windows Service named “@MAX SyncUp Service”.
Publisher:
@MAX Software  (signed by Maxim Deminov)

Product:
@MAX SyncUp

Description:
@MAX SyncUp Service

Version:
2, 9, 0, 500

MD5:
54e25d0e5933064d42ebf920b30614f5

SHA-1:
8b5ff6a69c83760f27d2510a530329f7af6da300

SHA-256:
d6e84c79a7727d532ce742ae43223ec0d9a4c4d8cbf5538c56c2ffddeeb180a5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:53:09 PM UTC  (today)

File size:
1.6 MB (1,701,280 bytes)

Product version:
2, 9

Copyright:
Copyright © @Max Software

Original file name:
msusvc.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\maxsyncup\msusvc.exe

Digital Signature
Signed by:
Maxim Deminov

Authority:
StartCom Ltd.

Valid from:
6/13/2011 1:44:12 AM

Valid to:
6/12/2013 11:31:17 PM

Subject:
E=dmax@atmaxsoft.com, CN=Maxim Deminov, L=Katsiveli, S=Krym, C=UA, Description=446833-pAQX93buHWqcz2Lu

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0379

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:ybR8GApbq9r3uXjeWYw0QJTHLxJCtRNuwPuowAtKzDlSqJYH5qyepubl5t+/0+6h:ybiLqZKnYLQFrxofKzDl/oWpil50XpM/

Entry address:
0x158B00

Entry point:
55, 8B, EC, 83, C4, F0, 53, 56, 57, 33, C0, 89, 45, F0, B8, 38, 80, 16, 00, E8, 30, EC, EA, FF, 33, C0, 55, 68, 89, 8C, 16, 00, 64, FF, 30, 64, 89, 20, 6A, 03, E8, 6B, F1, EA, FF, E8, 32, 92, ED, FF, 84, C0, 74, 2A, B1, 01, BA, 98, 8C, 16, 00, B8, C0, 8C, 16, 00, E8, 3D, 5E, EB, FF, 84, C0, 75, 15, B1, 01, BA, 98, 8C, 16, 00, B8, D0, 8C, 16, 00, E8, 28, 5E, EB, FF, 84, C0, 74, 04, 33, C0, EB, 02, B0, 01, 8B, 15, 18, A2, 17, 00, 88, 02, A1, 58, A5, 17, 00, 33, D2, 89, 10, B1, 01, BA, 98, 8C, 16, 00, B8, D0...
 
[+]

Entropy:
6.6875

Developed / compiled with:
Microsoft Visual C++

Code size:
1.3 MB (1,408,512 bytes)

Service
Display name:
@MAX SyncUp Service

Service name:
MaxSyncUpService

Type:
Win32OwnProcess


Scan msusvc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.