home

rg_agent.exe

Report Generator Integration Agent

DigiNotar

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Report Generator Integration Agent’.
Publisher:
OnePacs  (signed by DigiNotar)

Product:
Report Generator Integration Agent

Version:
1.0.0.0

MD5:
ed104f1d76e68fa0f35ed70512f4101e

SHA-1:
a10e905a0246045fb27956ed405178c363d53232

SHA-256:
f9d11affb5814bf672337104f0389494d28fb4b5672dcf8ba91226710ce4dd9a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 12:59:49 PM UTC  (today)

File size:
51 MB (53,437,952 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2015 OnePacs

Original file name:
rg_agent.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\onepacs\report generator\agent\rg_agent.exe

Digital Signature
Signed by:
DigiNotar

Authority:
GTE Corporation

Valid from:
9/27/2006 3:53:32 AM

Valid to:
9/27/2011 3:52:30 AM

Subject:
CN=DigiNotar Cyber CA, O=DigiNotar, C=NL

Issuer:
CN=GTE CyberTrust Global Root, OU="GTE CyberTrust Solutions, Inc.", O=GTE Corporation, C=US

Serial number:
07271003

File PE Metadata
OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
3.0

CTPH (ssdeep):
786432:RuykDc3MDH5arox5vXkOgdkT8XaC0S83pp9RWUy9NcxXcIC:FwwTO7

Entry address:
0x140200

Entry point:
55, 53, 56, 57, 83, C4, DC, C7, 44, 24, 04, 00, 00, 00, 00, C7, 44, 24, 08, 00, 00, 00, 00, 8D, 44, 24, 04, 89, 04, 24, E8, 71, 43, CE, 00, 8B, F8, 85, FF, 75, 0D, C7, C0, 90, B7, B3, 01, 50, E8, 6B, D8, FF, FF, 59, 6A, 40, 57, 8D, 7C, 24, 14, B9, 05, 00, 00, 00, 33, C0, F3, AB, 5F, 8D, 44, 24, 10, 8B, F0, C7, 44, 24, 14, 10, 00, 00, 00, E8, D6, DF, FF, FF, 89, 44, 24, 14, E9, A0, 00, 00, 00, 90, 55, E8, 96, DF, FF, FF, E9, 94, 00, 00, 00, 90, 56, 57, 6A, 00, E8, 57, E4, FF, FF, 8B, 44, 24, 18, 83, C0, 01...
 
[+]

Entropy:
6.1091

Code size:
14.1 MB (14,827,520 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Report Generator Integration Agent

Command:
"C:\Program Files\onepacs\report generator\agent\rg_agent.exe"


Scan rg_agent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.