QuickSnipService.exe
QuickSnip Service by Lenovo Information Products (Shenzhen) Co. (Signed)
Overview
There are 2 versions of quicksnipservice.exe in the wild, the latest version being 1,5,35,0. It is started as a Windows Service with the name 'Lenovo QuickSnip Service' and described as “This service provides helper functions to capture screen shots.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 223.07 KB. The file is a digitally signed and issued to Lenovo Information Products (Shenzhen) Co. by VeriSign. During the process's lifecycle, the typical CPU resource utilization is about 0.0001% including both foreground and background operations, the average private memory consumption is about 1.54 MB with the maximum memory reaching around 3.25 MB. Addionally, typically read and write I/O disk operations is about 0 Bytes per minute for reads and 3 Bytes per minute for writes.
 Details
|
| File name: | quicksnipservice.exe |
| Publisher: | LENOVO INCORPORATED. |
| Product name: | QuickSnip Service |
| Description: | Lenovo QuickSnip Service |
| Typical file path: | C:\Program Files\lenovo\quicksnipservice\quicksnipservice.exe |
| Certificate |
| Issued to: | Lenovo Information Products (Shenzhen) Co. |
| Authority (CA): | VeriSign |
| Windows Service |
| Service name: | Lenovo QuickSnip Service |
| Description: | “This service provides helper functions to capture screen shots.” |
| Type: | Win32OwnProcess |
Behaviors
(Note, the behaviors below are for all versions of quicksnipservice.exe, select a unique version for details.)
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'Lenovo QuickSnip Service'
All file variations of quicksnipservice.exe
