HipServAgent.exe

Axentra QuickConnect

Axentra Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘HipServ Agent’. This is installed with LifeCloud Desktop Applications.
Publisher:
Axentra Corporation  (signed and verified)

Product:
Axentra QuickConnect

Description:
HipServAgent Application

Version:
1.4.4.210

MD5:
df97bcdb9d54cbc3e2c017d98378984b

SHA-1:
faa53f649b38fcb057501ffac500a984eea15f94

SHA-256:
3cb8a16f995d92c58c0c0f8c7ab59f63988252e7885ed51b6424895b2e911c37

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/3/2024 1:58:33 PM UTC  (today)

File size:
2.6 MB (2,722,920 bytes)

Product version:
1.4.4.210

Copyright:
©2013 Medion

Original file name:
HipServAgent.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\medion\lifecloud desktop applications\hipservagent\hipservagent.exe

Digital Signature
Authority:
COMODO CA Limited

Valid from:
8/20/2013 2:00:00 AM

Valid to:
8/21/2014 1:59:59 AM

Subject:
CN=Axentra Corporation, O=Axentra Corporation, STREET=283 Dalhousie St, STREET=Suite 300, L=Ottawa, S=Ontario, PostalCode=K1N 7E5, C=CA

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
1A4AB0D0522CCDFEEAA24FD630423483

File PE Metadata
Compilation timestamp:
9/30/2013 10:04:09 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:DlVJp3gLh5stTlMOBuuuuuuuuuuuKuuuuuuuuuuueOSxJuuuuuuuuuuuuu9:DjgLh2LuuuuuuuuuuuKuuuuuuuuuuue+

Entry address:
0x10BD22

Entry point:
E8, ED, 06, 00, 00, E9, 35, FD, FF, FF, FF, 25, 38, E6, 52, 00, FF, 25, 3C, E6, 52, 00, 6A, 10, 68, 58, 5A, 58, 00, E8, 44, 04, 00, 00, 33, C0, 89, 45, E0, 89, 45, FC, 89, 45, E4, 8B, 45, E4, 3B, 45, 10, 7D, 13, 8B, 75, 08, 8B, CE, FF, 55, 14, 03, 75, 0C, 89, 75, 08, FF, 45, E4, EB, E5, C7, 45, E0, 01, 00, 00, 00, C7, 45, FC, FE, FF, FF, FF, E8, 08, 00, 00, 00, E8, 4B, 04, 00, 00, C2, 14, 00, 83, 7D, E0, 00, 75, 11, FF, 75, 18, FF, 75, E4, FF, 75, 0C, FF, 75, 08, E8, 9A, FA, FF, FF, C3, CC, CC, CC, 83, 3D...
 
[+]

Code size:
1.2 MB (1,232,896 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
HipServ Agent

Command:
C:\Program Files\medion\lifecloud desktop applications\hipservagent\hipservagent.exe


The file HipServAgent.exe has been discovered within the following program.

LifeCloud Desktop Applications  by Axentra Corporation
www.axentra.com
About 8% of users remove it
 
Powered by Should I Remove It?

Scan HipServAgent.exe - Powered by Reason Core Security