home

SentinelAgent.exe

Sentinel Agent

Sentinel Labs, Inc.

It runs as a separate (within the context of its own process) windows Service named “Sentinel Agent”.
Publisher:
SentinelOne, Inc.  (signed by Sentinel Labs, Inc.)

Product:
Sentinel Agent

Description:
SentinelOne Kernel Monitor

Version:
1.6.2008.0

MD5:
491747bbba9d3cc6ebad2098f4aeb6e4

SHA-1:
11e52c5d8daef47f9890d6e32f971cc5a661edfd

SHA-256:
08066163d1756b12a63d0bec54daceff1f20a924b6a12d578f37508ae9140090

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:04:33 PM UTC  (today)

File size:
3.9 MB (4,102,776 bytes)

Product version:
1.6.2008.0

Copyright:
SentinelOne, Inc.

Original file name:
SentinelAgent.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\sentinelone\sentinel agent 1.6.2008.0\sentinelagent.exe

Digital Signature
Signed by:
Sentinel Labs, Inc.

Authority:
DigiCert Inc

Valid from:
7/5/2015 3:00:00 AM

Valid to:
12/30/2015 2:00:00 PM

Subject:
CN="Sentinel Labs, Inc.", O="Sentinel Labs, Inc.", L=Palo Alto, S=California, C=US, PostalCode=94306, STREET=2500 El Camino Real, SERIALNUMBER=5278570, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization

Issuer:
CN=DigiCert EV Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
03292AD5BA34EFCC86534C31F725BB85

File PE Metadata
Compilation timestamp:
11/10/2015 1:46:47 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
12.0

CTPH (ssdeep):
49152:S8gtq0+FQxnLtjcnKAXyUDaX+qjrUMwRUwHx8TxvWldgqF+kTTMZpVcNJLIOsJ6p:iLhc3Xyx+qjrUMwRUwHFd/F+QMzVcCI

Entry address:
0x233A9A

Entry point:
E8, A1, A8, 01, 00, E9, 7B, FE, FF, FF, 55, 8B, EC, FF, 15, 9C, 13, 6D, 00, 6A, 01, A3, AC, 46, 7A, 00, E8, C0, A9, 01, 00, FF, 75, 08, E8, 52, 98, 00, 00, 83, 3D, AC, 46, 7A, 00, 00, 59, 59, 75, 08, 6A, 01, E8, A6, A9, 01, 00, 59, 68, 09, 04, 00, C0, E8, 20, 98, 00, 00, 59, 5D, C3, 55, 8B, EC, 81, EC, 24, 03, 00, 00, 6A, 17, E8, E1, 25, 04, 00, 85, C0, 74, 05, 6A, 02, 59, CD, 29, A3, 90, 44, 7A, 00, 89, 0D, 8C, 44, 7A, 00, 89, 15, 88, 44, 7A, 00, 89, 1D, 84, 44, 7A, 00, 89, 35, 80, 44, 7A, 00, 89, 3D, 7C...
 
[+]

Entropy:
6.4054

Code size:
2.8 MB (2,946,048 bytes)

Service
Display name:
Sentinel Agent

Service name:
SentinelAgent

Description:
SentinelOne Endpoint Protection Agent

Type:
Win32OwnProcess


Scan SentinelAgent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.