home

hipservagent.exe

Roxio Streamer QuickConnect

Axentra Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘HipServ Agent’.
Publisher:
Axentra Corporation  (signed and verified)

Product:
Roxio Streamer QuickConnect

Description:
Roxio Streamer Agent Application

Version:
1.4.2.1872

MD5:
903356180867063638bf16faac502102

SHA-1:
f600207cb38eae28c436d99b991d3500b0b4b952

SHA-256:
46d632034990e0637faa6d927126627746e9f09a7301fc84e2d92b442b259b27

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 12:39:50 AM UTC  (today)

File size:
2.2 MB (2,299,304 bytes)

Product version:
1.4.2.1872

Copyright:
2010 Sonic Solutions. All Rights Reserved.

Original file name:
Roxio Streamer Agent.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\roxio streamer desktop applications\hipservagent\hipservagent.exe

Digital Signature
Signed by:
Axentra Corporation

Authority:
VeriSign, Inc.

Valid from:
6/2/2010 5:00:00 PM

Valid to:
6/3/2011 4:59:59 PM

Subject:
CN=Axentra Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Axentra Corporation, L=Ottawa, S=Ontario, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2207F7BED89B4FE0829AA229D1EADD72

File PE Metadata
Compilation timestamp:
9/30/2010 3:47:40 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:0zAlOAGieqpZKVlY5CyLqWYO8yBXPPAtjK3N3PoaTGv/QgOfw9pAMBwmJ0qnEDA5:FhGb3bY/9X3A9uTGLOfw9mGws0qnEDl4

Entry address:
0x107A07

Entry point:
E8, E8, 05, 00, 00, E9, 35, FD, FF, FF, 6A, 10, 68, 78, B8, 58, 00, E8, 53, 02, 00, 00, 33, C0, 89, 45, E0, 89, 45, FC, 89, 45, E4, 8B, 45, E4, 3B, 45, 10, 7D, 13, 8B, 75, 08, 8B, CE, FF, 55, 14, 03, 75, 0C, 89, 75, 08, FF, 45, E4, EB, E5, C7, 45, E0, 01, 00, 00, 00, C7, 45, FC, FE, FF, FF, FF, E8, 08, 00, 00, 00, E8, 5A, 02, 00, 00, C2, 14, 00, 83, 7D, E0, 00, 75, 11, FF, 75, 18, FF, 75, E4, FF, 75, 0C, FF, 75, 08, E8, 4B, F9, FF, FF, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 83, 3D, 78, 38, 5B, 00, 00...
 
[+]

Entropy:
6.3869

Code size:
1.2 MB (1,245,184 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
HipServ Agent

Command:
"C:\Program Files\roxio streamer desktop applications\hipservagent\hipservagent.exe"


Scan hipservagent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.