home

pbeagent.exe

PowerChute Business Edition Agent

American Power Conversion

It runs as a separate (within the context of its own process) windows Service named “APC PBE Agent”.
Publisher:
APC  (signed by American Power Conversion)

Product:
PowerChute Business Edition Agent

Version:
9, 0, 1, 008

MD5:
1c2ee6276c6cf4223996deadac142d6d

SHA-1:
0a14feaebaeb31d3b40dd73d3010381463ef0cb0

SHA-256:
352b4c707a87cfc53e62d248912c44fe4ab8cf1985b9e5851df4d915343b1d83

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 1:19:48 PM UTC  (today)

File size:
33.4 KB (34,168 bytes)

Product version:
9, 0, 1, 008

Copyright:
Copyright (C) 2001-2011

Original file name:
pbeagent.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\apc\powerchute business edition\agent\pbeagent.exe

Digital Signature
Signed by:
American Power Conversion

Authority:
VeriSign, Inc.

Valid from:
4/21/2010 10:00:00 AM

Valid to:
5/5/2012 9:59:59 AM

Subject:
CN=American Power Conversion, OU=132 Fairgrounds Rd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=American Power Conversion, L=West Kingston, S=Rhode Island, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0DAAB5D95410B6338FE16346FEAC7AD5

File PE Metadata
Compilation timestamp:
3/1/2011 12:40:03 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
384:PRFnwXt6ujelfyR+tbV4mLC7y+vJo0CoD9UpVoRW2ZqYJLu1Q1bCks:PRFGtZelC+tbVJORGpoUpz2ZjLWobCks

Entry address:
0x33D0

Entry point:
55, 8B, EC, 6A, FF, 68, 38, 41, 40, 00, 68, D0, 35, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, C4, 98, 53, 56, 57, 89, 65, E8, C7, 45, FC, 00, 00, 00, 00, 6A, 02, FF, 15, C8, 40, 40, 00, 83, C4, 04, C7, 05, 04, 5C, 40, 00, FF, FF, FF, FF, C7, 05, 08, 5C, 40, 00, FF, FF, FF, FF, FF, 15, C4, 40, 40, 00, 8B, 0D, C4, 5A, 40, 00, 89, 08, FF, 15, C0, 40, 40, 00, 8B, 15, C0, 5A, 40, 00, 89, 10, A1, BC, 40, 40, 00, 8B, 08, 89, 0D, 0C, 5C, 40, 00, E8, 76, 01, 00, 00, A1, 70, 5A, 40, 00, 85...
 
[+]

Entropy:
4.8289

Developed / compiled with:
Microsoft Visual C++

Code size:
12 KB (12,288 bytes)

Service
Display name:
APC PBE Agent

Service name:
APCPBEAgent

Description:
PowerChute Business Edition Agent

Type:
Win32OwnProcess


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.