home

kcssetup.exe

Kaseya Agent Installer

Kaseya

This is a self-extracting archive and installer. The file has been seen being downloaded from managed.it-solutions-inc.com.
Publisher:
Kaseya

Product:
Kaseya Agent Installer

Version:
5.1.0.0

MD5:
e2289575759b40a65498343d3922c682

SHA-1:
e7c04c0bb1466230c3244257779396553fba38ac

SHA-256:
5b2c73be2d5a45c3d6eff550996e28a7fc9536dd168d2e2357dd0dec538399a8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/12/2025 5:57:38 PM UTC  (today)

File size:
2.1 MB (2,207,904 bytes)

Product version:
5.1.0.0

Copyright:
Copyright © 2001-2008 by Kaseya, All Rights Reserved

Trademarks:
Kaseya Virtual System Administrator (tm)

Original file name:
VarAgentSetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\kcssetup.exe

File PE Metadata
Compilation timestamp:
8/29/2008 9:16:13 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
49152:ZdqthIPxsZnLpHR2UWLInLax7UnUccsjHFgpWzX0L:ZVPwnRRRK267UnUcciipW

Entry address:
0xB12E

Entry point:
6A, 60, 68, 90, 84, 41, 00, E8, DE, 0E, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, 4A, EF, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, 40, 40, 41, 00, 8B, 4E, 10, 89, 0D, D0, D0, 41, 00, 8B, 46, 04, A3, DC, D0, 41, 00, 8B, 56, 08, 89, 15, E0, D0, 41, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, D4, D0, 41, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, D4, D0, 41, 00, C1, E0, 08, 03, C2, A3, D8, D0, 41, 00, 33, F6, 56, 8B, 3D, 38, 40, 41, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03...
 
[+]

Entropy:
7.8790

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
76 KB (77,824 bytes)

The file kcssetup.exe has been seen being distributed by the following URL.

https://managed.it-solutions-inc.com/mkDefault.asp?id=28383587

Scan kcssetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.