» AgentInstaller.EXE
Overview
Analysis
File Details
Programs (1)

AgentInstaller.EXE

Agent Installer

Patchlink Corporation

File name:

AgentInstaller.EXE

Publisher:

Patchlink Corporation (signed and verified)

Product:

Agent Installer

Description:

Update Agent Installer

Version:

6, 2, 0, 181

MD5:

78a1d8b7d22b7b8c0f1117d8572a12c4

SHA-1:

609421183be1b036fd69af03e39ea03679984a25

SHA-256:

b860c386a3d6908226bdb6635600460fe482aebb48a66f94cc100451b8450c38

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

10/23/2018 8:55:31 AM UTC (today)

Scan engine

Detection

Engine version

Bkav FE

HW32.Laneul

1.3.0.4923

File size:

285.6 KB (292,416 bytes)

Product version:

6, 2, 0, 181

Trademarks:

PatchLink

Original file name:

AgentInstaller.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\lumension\lemssagent\agentinstaller.exe

Digital Signature

Signed by:

Patchlink Corporation

Authority:

VeriSign, Inc.

Valid from:

2/15/2005 7:00:00 PM

Valid to:

3/17/2006 7:59:59 PM

Subject:

CN=Patchlink Corporation, OU=Engineering, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Patchlink Corporation, L=Scottsdale, S=Arizona, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

16835E9F84FE6FD3D0CAFBE2F42B4EBF

File PE Metadata

Compilation timestamp:

7/28/2005 2:18:00 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

6144:Z/kZs5+PMF2+v8b7EfBvFz7GD8CIWpHT8FgD0Y/pxQBF:Z8Zs5+UE+vgEfy8gh+BF

Entry address:

0xE24E

Entry point:

6A, 60, 68, 50, B9, 42, 00, E8, C6, 0B, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, EA, F7, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, 80, 82, 42, 00, 8B, 4E, 10, 89, 0D, F4, 6B, 43, 00, 8B, 46, 04, A3, 00, 6C, 43, 00, 8B, 56, 08, 89, 15, 04, 6C, 43, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, F8, 6B, 43, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, F8, 6B, 43, 00, C1, E0, 08, 03, C2, A3, FC, 6B, 43, 00, 33, F6, 56, 8B, 3D, 2C, 82, 42, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03... 
[+]

Entropy:

6.6328

Developed / compiled with:

Microsoft Visual C++ v7.0

Code size:

156 KB (159,744 bytes)

The file AgentInstaller.EXE has been discovered within the following programs.

Lumension EMSS Agent by Lumension

Publisher's description - “Lumension® Endpoint Management and Security Suite is an agile solution suite that reduces complexity for both security and IT operations teams, optimizes TCO, improves visibility and delivers control back to IT.”

support.lumension.com

10% remove it

Scan AgentInstaller.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.