home

AgentMon.exe

Virtual System Administrator Agent

Kaseya International Limited

It runs as a separate (within the context of its own process) windows Service named “Kaseya Agent”. This is installed with multiple programs including CWPS CMS Agent and Kaseya Agent.
Publisher:
Kaseya International Limited

Product:
Virtual System Administrator Agent

Version:
6, 3, 0, 19

MD5:
eb1d9861888a3da2f8a5948159912434

SHA-1:
dcac2602afbe12ef14b2bcb7aa42df98eac36f8a

SHA-256:
52109d345f4ce78894cd7b10310c99a672a83b3ee6c6161a2ce91e2d4d8bca4c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 11:46:52 AM UTC  (today)

File size:
1.1 MB (1,101,824 bytes)

Product version:
6, 3, 0, 0

Copyright:
Copyright © 2000-2013 Kaseya International Limited. All Rights Reserved.

Trademarks:
http://www.kaseya.com/jp/trademark-guidelines.aspx

Original file name:
AgentMon.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\kaseya\sndslt60745071490277\agentmon.exe

File PE Metadata
Compilation timestamp:
6/27/2013 4:44:07 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:vvOCRskwBhYcBm5xmoKbvuu3Zm+SxKYJekiUYW4q9TzY:N+Bh7vSCk54sTz

Entry address:
0x9E4BB

Entry point:
E8, 7C, 2B, 01, 00, E9, 16, FE, FF, FF, B8, 58, 75, 4F, 00, C3, A1, 80, A0, 54, 00, 85, C0, 56, 6A, 14, 5E, 75, 07, B8, 00, 02, 00, 00, EB, 06, 3B, C6, 7D, 07, 8B, C6, A3, 80, A0, 54, 00, 6A, 04, 50, E8, E8, 0C, 00, 00, 85, C0, 59, 59, A3, 70, 90, 54, 00, 75, 1E, 6A, 04, 56, 89, 35, 80, A0, 54, 00, E8, CF, 0C, 00, 00, 85, C0, 59, 59, A3, 70, 90, 54, 00, 75, 05, 6A, 1A, 58, 5E, C3, 33, D2, B9, 58, 75, 4F, 00, EB, 05, A1, 70, 90, 54, 00, 89, 0C, 02, 83, C1, 20, 83, C2, 04, 81, F9, D8, 77, 4F, 00, 7C, EA, 6A...
 
[+]

Entropy:
6.6080

Code size:
796 KB (815,104 bytes)

2 Services
Display name:
Kaseya Agent

Service name:
KASNDSLT60745071490277

Description:
Machine.Group ID:bethlaptop.computer.vip Server Address:kaseya.sundogits.com

Type:
Win32OwnProcess

Display name:
Stepco ManageIT

Service name:
KASTPCS944965785632175

Description:
Machine.Group ID:lt_6460b01.venray.otto_facilitair Server Address:servicedesk.stepco.nl

Type:
Win32OwnProcess


The file AgentMon.exe has been discovered within the following programs.

CWPS CMS Agent  by Kaseya
About 3% of users remove it
Kaseya Agent  by Kaseya
This is the client agent for the Kaseya IT Management Software, used to automate your IT Services.
www.kaseya.com
About 1% of users remove it
 
Powered by Should I Remove It?

Scan AgentMon.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.