» HipServAgent.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

HipServAgent.exe

Axentra QuickConnect

Axentra Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘HipServ Agent’. This is installed with MediaShare Desktop Applications.

File name:

HipServAgent.exe

Publisher:

Axentra Corporation (signed and verified)

Product:

Axentra QuickConnect

Description:

HipServAgent Application

Version:

1.4.2.1712

MD5:

0900617f7df0dd7bf201386c36b9e076

SHA-1:

e6d27435859c2b483a6d79c827d4858bf6292569

SHA-256:

10f3fa739bfe7d9c3c1cffb1860b04dd1e7323b099fd14151f0ad817185b47b3

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 9:59:59 AM UTC (today)

File size:

1.9 MB (2,011,424 bytes)

Product version:

1.4.2.1712

Original file name:

HipServAgent.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\verbatim\mediashare desktop applications\hipservagent\hipservagent.exe

Digital Signature

Signed by:

Axentra Corporation

Authority:

The USERTRUST Network

Valid from:

6/1/2009 5:00:00 PM

Valid to:

6/2/2010 4:59:59 PM

Subject:

CN=Axentra Corporation, O=Axentra Corporation, STREET=377 Dalhousie St., STREET=Suite 210, L=Ottawa, S=Ontario, PostalCode=K1N 9N8, C=CA

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

6C977BB7B1D99AD9A41589F167DF66F6

File PE Metadata

Compilation timestamp:

3/16/2010 8:56:14 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

24576:wMSAU/1BBpd/p5Q97mkH7g+5lTGvHxHE7:IP/zB9yA+7Tya

Entry address:

0x107597

Entry point:

E8, E8, 05, 00, 00, E9, 35, FD, FF, FF, 6A, 10, 68, F0, B7, 58, 00, E8, 53, 02, 00, 00, 33, C0, 89, 45, E0, 89, 45, FC, 89, 45, E4, 8B, 45, E4, 3B, 45, 10, 7D, 13, 8B, 75, 08, 8B, CE, FF, 55, 14, 03, 75, 0C, 89, 75, 08, FF, 45, E4, EB, E5, C7, 45, E0, 01, 00, 00, 00, C7, 45, FC, FE, FF, FF, FF, E8, 08, 00, 00, 00, E8, 5A, 02, 00, 00, C2, 14, 00, 83, 7D, E0, 00, 75, 11, FF, 75, 18, FF, 75, E4, FF, 75, 0C, FF, 75, 08, E8, 4B, F9, FF, FF, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 83, 3D, 88, 38, 5B, 00, 00... 
[+]

Entropy:

6.3269

Code size:

1.2 MB (1,245,184 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

HipServ Agent

Command:

C:\Program Files\verbatim\mediashare desktop applications\hipservagent\hipservagent.exe

The file HipServAgent.exe has been discovered within the following program.

MediaShare Desktop Applications by Axentra Corporation

www.axentra.com

About 6% of users remove it

Scan HipServAgent.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.