home

syslogger.exe

American Power Conversion

This is installed with multiple programs including PowerChute Business Edition Agent and PowerChute Business Edition Console.
Publisher:
American Power Conversion  (signed and verified)

MD5:
da849829c93096605e12ac4926f280c0

SHA-1:
39b726e367b6346e75c9ab6543c6962675395922

SHA-256:
bda34d1b1b49d85cf7d7bc7edeca9c8fb560c67b92b81f724f4cf2375cea5684

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:56:21 AM UTC  (today)

File size:
23.1 KB (23,672 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\apc\powerchute business edition\agent\bin\syslogger.exe

Digital Signature
Signed by:
American Power Conversion

Authority:
VeriSign, Inc.

Valid from:
3/20/2012 1:00:00 AM

Valid to:
5/5/2014 1:59:59 AM

Subject:
CN=American Power Conversion, OU=132 Fairgrounds Rd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=American Power Conversion, L=West Kingston, S=Rhode Island, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
45F65EB9500C83EBD317FA711F5FECB4

File PE Metadata
Compilation timestamp:
9/5/2012 11:02:44 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
192:/NxIccOW3HJbP1oynPlpe335/wJirNmL/cu7arYbVs+vnwr9ZCspE+TMcrsgy:/NxM11ZXe3mirILckdBeMQy

Entry address:
0x12A0

Entry point:
55, 8B, EC, 6A, FF, 68, 70, 20, 40, 00, 68, 20, 14, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 3C, 20, 40, 00, 59, 83, 0D, E4, 34, 40, 00, FF, 83, 0D, E8, 34, 40, 00, FF, FF, 15, 38, 20, 40, 00, 8B, 0D, E0, 34, 40, 00, 89, 08, FF, 15, 5C, 20, 40, 00, 8B, 0D, DC, 34, 40, 00, 89, 08, A1, 30, 20, 40, 00, 8B, 00, A3, EC, 34, 40, 00, E8, 10, 01, 00, 00, 39, 1D, CC, 34, 40, 00, 75, 0C, 68, 1C, 14, 40, 00, FF, 15, 2C, 20...
 
[+]

Entropy:
3.8907

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
4 KB (4,096 bytes)

The file syslogger.exe has been discovered within the following programs.

PowerChute Business Edition Agent  by American Power Conversion Corporation
Publisher's description - “PowerChute Business Edition software provides UPS management, safe system shutdown and innovative energy management capabilities. In the event of an extended power outage, graceful unattended shutdown ensures no information is lost and time to recovery is minimized.”
www.apc.com/products/family/?id=125
About 4% of users remove it
PowerChute Business Edition Console  by American Power Conversion Corporation
Publisher's description - “UPS management, safe system shutdown, and energy management software for up to 25 servers and workstations using dedicated serial or USB connections. PowerChute Business Edition software provides UPS management, safe system shutdown and innovative energy management capabilities.”
www.apc.com
About 5% of users remove it
 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.