home

hightail.exe

Hightail

Hightail Inc. (YouSendIt Inc.)

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Hightail Sync Agent’.
Publisher:
Hightail Inc.  (signed by Hightail Inc. (YouSendIt Inc.))

Product:
Hightail

Description:
Hightail Agent

Version:
3.3.0.3248

MD5:
16813edb8e3ea6b535e110a55d2fceac

SHA-1:
1113490550097d1b550a2ef62c5efd1743657f0c

SHA-256:
d2dafb970b0498e5b12dc4f24e067665bd014d831982e1ec231b9671255b77be

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 10:51:52 PM UTC  (today)

File size:
6.7 MB (7,039,544 bytes)

Product version:
3.3.0.3248

Copyright:
Hightail Inc. (c). All rights reserved.

Original file name:
YSIAgent.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\hightail desktop app\hightail.exe

Digital Signature
Signed by:
Hightail Inc. (YouSendIt Inc.)

Authority:
Thawte, Inc.

Valid from:
7/7/2013 7:00:00 PM

Valid to:
7/8/2015 6:59:59 PM

Subject:
CN=Hightail Inc. (YouSendIt Inc.), O=Hightail Inc. (YouSendIt Inc.), L=Campbell, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
77DA7C1FB07A72BDF4E7688C2ED7308A

File PE Metadata
Compilation timestamp:
2/9/2015 1:33:25 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:1SMfFrwiJRKxk18yinhsYrPgFwAvo2Z8wm2M8:fSiJRKxk16sYrPgFFvo2Zlt

Entry address:
0x21DC26

Entry point:
E8, 57, D6, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 10, 83, 65, FC, 00, 56, 8B, 75, 08, 85, F6, 75, 16, E8, A6, 2D, 00, 00, 6A, 16, 5E, 89, 30, E8, 16, 85, 00, 00, 8B, C6, E9, 0C, 02, 00, 00, 6A, 24, 68, FF, 00, 00, 00, 56, E8, 99, CE, FF, FF, 8B, 45, 0C, 83, C4, 0C, 85, C0, 74, D3, 8B, 08, 8B, 40, 04, 89, 4D, F0, 89, 45, F4, 83, F8, FF, 7F, 16, 7C, 08, 81, F9, 40, 57, FF, FF, 73, 0C, E8, 5F, 2D, 00, 00, 6A, 16, 5E, 89, 30, EB, BC, 83, F8, 07, 7C, 0A, 7F, ED, 81, F9, CF, 26, 41, 93, 77, E5...
 
[+]

Entropy:
6.1138

Code size:
3.9 MB (4,064,256 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Hightail Sync Agent

Command:
"C:\Program Files\hightail desktop app\hightail.exe"


Scan hightail.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.