home

STAgent.exe

VMware vCenter Protect

Shavlik Technologies

It runs as a separate (within the context of its own process) windows Service named “VMware vCenter Protect Agent”. This is installed with multiple programs including VMware vCenter Protect Patch Engine.
Publisher:
VMware, Inc.  (signed by Shavlik Technologies)

Product:
VMware vCenter Protect

Description:
ST Agent

Version:
8.0.3965.1

MD5:
abc6f543d7789ded1f4c740c23a429c0

SHA-1:
3b59d742f984a834dc0ab4dafeada355854529f6

SHA-256:
bf1b2d3e7e31ffa111525dadeba9f69ebda57191fa033a21b35e7b59e3ebe570

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 2:46:44 AM UTC  (today)

File size:
268.6 KB (275,016 bytes)

Product version:
8.0.0.0

Copyright:
Copyright © VMware, Inc. All rights reserved.

Original file name:
STAgent.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\vmware\vcenter protect agent\stagent.exe

Digital Signature
Signed by:
Shavlik Technologies

Authority:
VeriSign, Inc.

Valid from:
12/5/2011 5:45:00 AM

Valid to:
1/10/2014 5:44:59 AM

Subject:
CN=Shavlik Technologies, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Shavlik Technologies, L=White Bear Lake, S=Minnesota, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5FDE5484D7DC8C8EA6E7CD93B5155268

File PE Metadata
Compilation timestamp:
8/22/2012 2:34:27 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
6144:zzQH/83tkJy7/X1IuXChZJSlS/QOAULAl:+/otkM7dIS0ZJOS1LAl

Entry address:
0x220F1

Entry point:
E8, DD, 03, 00, 00, E9, B3, FD, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 70, E7, 43, 00, 89, 0D, 6C, E7, 43, 00, 89, 15, 68, E7, 43, 00, 89, 1D, 64, E7, 43, 00, 89, 35, 60, E7, 43, 00, 89, 3D, 5C, E7, 43, 00, 66, 8C, 15, 88, E7, 43, 00, 66, 8C, 0D, 7C, E7, 43, 00, 66, 8C, 1D, 58, E7, 43, 00, 66, 8C, 05, 54, E7, 43, 00, 66, 8C, 25, 50, E7, 43, 00, 66, 8C, 2D, 4C, E7, 43, 00, 9C, 8F, 05, 80, E7, 43, 00, 8B, 45, 00, A3, 74, E7, 43, 00, 8B, 45, 04, A3, 78, E7, 43, 00, 8D, 45, 08, A3, 84, E7, 43...
 
[+]

Entropy:
6.2057

Code size:
156.5 KB (160,256 bytes)

Service
Display name:
VMware vCenter Protect Agent

Service name:
STAgent

Description:
Provides network services for VMware vCenter Protect Agent components

Type:
Win32OwnProcess

Depends on:
STDispatch


The file STAgent.exe has been discovered within the following programs.

ScriptLogic Agent  by ScriptLogic Corporation
www.scriptlogic.com
About 5% of users remove it
ScriptLogic Patch Engine  by ScriptLogic Corporation
About 6% of users remove it
VMware vCenter Protect Agent  by VMware, Inc.
Publisher's description - “VMware vCenter Protect Agent is an agent service. The agents configured by VMware vCenter Protect Agent are distributed agents, meaning they are installed on physically distinct machines and have the ability to independently initiate specific actions.”
www.shavlik.com
6% remove it
VMware vCenter Protect Patch Engine  by VMware, Inc.
Publisher's description - “VMware vCenter Protect is built upon the industry leading HFNetChk scan engine developed for Microsoft by Shavlik Technologies (now a part of VMware Inc).”
5% remove it
 
Powered by Should I Remove It?

Scan STAgent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.