» HipServAgent.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

HipServAgent.exe

Axentra QuickConnect

Axentra Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘HipServ Agent’. This is installed with LifeCloud Desktop Applications.

File name:

HipServAgent.exe

Publisher:

Axentra Corporation (signed and verified)

Product:

Axentra QuickConnect

Description:

HipServAgent Application

Version:

1.4.4.219

MD5:

336a4a383200eff3aca9bdb1f1274f58

SHA-1:

66178f6c7317511040d380553aa0c293c7b70208

SHA-256:

39a0ad4d3595607c4b92ff4f33c04c5d199cf948ca5ff9bb03abd677155511a2

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/3/2024 8:21:10 AM UTC (today)

File size:

2.6 MB (2,722,920 bytes)

Product version:

1.4.4.219

Original file name:

HipServAgent.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\medion\lifecloud desktop applications\hipservagent\hipservagent.exe

Digital Signature

Signed by:

Axentra Corporation

Authority:

COMODO CA Limited

Valid from:

8/20/2013 2:00:00 AM

Valid to:

8/21/2014 1:59:59 AM

Subject:

CN=Axentra Corporation, O=Axentra Corporation, STREET=283 Dalhousie St, STREET=Suite 300, L=Ottawa, S=Ontario, PostalCode=K1N 7E5, C=CA

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

1A4AB0D0522CCDFEEAA24FD630423483

File PE Metadata

Compilation timestamp:

1/27/2014 9:36:04 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

49152:KlVJp3gLh5sFTlQOBuuuuuuuuuuuKuuuuuuuuuuueOSxJuuuuuuuuuuuuu+:KjgLh2/uuuuuuuuuuuKuuuuuuuuuuue5

Entry address:

0x10BD22

Entry point:

E8, ED, 06, 00, 00, E9, 35, FD, FF, FF, FF, 25, 38, E6, 52, 00, FF, 25, 3C, E6, 52, 00, 6A, 10, 68, 58, 5A, 58, 00, E8, 44, 04, 00, 00, 33, C0, 89, 45, E0, 89, 45, FC, 89, 45, E4, 8B, 45, E4, 3B, 45, 10, 7D, 13, 8B, 75, 08, 8B, CE, FF, 55, 14, 03, 75, 0C, 89, 75, 08, FF, 45, E4, EB, E5, C7, 45, E0, 01, 00, 00, 00, C7, 45, FC, FE, FF, FF, FF, E8, 08, 00, 00, 00, E8, 4B, 04, 00, 00, C2, 14, 00, 83, 7D, E0, 00, 75, 11, FF, 75, 18, FF, 75, E4, FF, 75, 0C, FF, 75, 08, E8, 9A, FA, FF, FF, C3, CC, CC, CC, 83, 3D... 
[+]

Code size:

1.2 MB (1,232,896 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

HipServ Agent

Command:

C:\Program Files\medion\lifecloud desktop applications\hipservagent\hipservagent.exe

The file HipServAgent.exe has been discovered within the following program.

LifeCloud Desktop Applications by Axentra Corporation

www.axentra.com

About 8% of users remove it

Scan HipServAgent.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.