home

_rs_agent.exe

R-Studio Agent

R-tools Technology Inc.

It runs as a separate (within the context of its own process) windows Service named “R-Studio Agent”.
Publisher:
R-tools Technology Inc.  (signed and verified)

Product:
R-Studio Agent

Version:
5, 4, 1, 10

MD5:
2c46bc26fde001c5d52ae0fa3573bf52

SHA-1:
76f73fb31f5a42f95f3e1efcf541343e9049d51e

SHA-256:
eac1ea64c87c2b7f96a74570c3a2f1530432b7d58d396974ad17121e52a3c7d4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 5:15:28 AM UTC  (today)

File size:
2 MB (2,058,232 bytes)

Product version:
5, 4, 1, 10

Copyright:
Copyright (c) 2001-2012 R-Tools Technology Inc.

Trademarks:
Copyright (c) 2001-2012 R-Tools Technology Inc.

Original file name:
R-Studio Agent.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Windows\System32\_rs_agent.exe

Digital Signature
Signed by:
R-tools Technology Inc.

Authority:
GlobalSign nv-sa

Valid from:
3/30/2009 4:25:13 PM

Valid to:
3/30/2012 4:25:13 PM

Subject:
E=office@r-tt.com, CN=R-tools Technology Inc., O=R-tools Technology Inc., C=CA

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012057F12DC0

File PE Metadata
Compilation timestamp:
2/17/2012 3:23:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:arJeEh6Krf/17IPlpic92bniINpHov7cTLw9kUdwmtNMBBHfhTnmVPkJX:aWKbs9ks7cTLFUdwmjQBHfhTSU

Entry address:
0x117AF4

Entry point:
E8, 7D, FF, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 83, EC, 08, 89, 7D, FC, 89, 75, F8, 8B, 75, 0C, 8B, 7D, 08, 8B, 4D, 10, C1, E9, 07, EB, 06, 8D, 9B, 00, 00, 00, 00, 66, 0F, 6F, 06, 66, 0F, 6F, 4E, 10, 66, 0F, 6F, 56, 20, 66, 0F, 6F, 5E, 30, 66, 0F, 7F, 07, 66, 0F, 7F, 4F, 10, 66, 0F, 7F, 57, 20, 66, 0F, 7F, 5F, 30, 66, 0F, 6F, 66, 40, 66, 0F, 6F, 6E, 50, 66, 0F, 6F, 76, 60, 66, 0F, 6F, 7E, 70, 66, 0F, 7F, 67, 40, 66, 0F, 7F, 6F, 50, 66, 0F, 7F, 77, 60, 66, 0F, 7F, 7F, 70, 8D, B6, 80, 00, 00, 00, 8D, BF...
 
[+]

Code size:
1.3 MB (1,339,392 bytes)

Service
Display name:
R-Studio Agent

Type:
Win32OwnProcess


Scan _rs_agent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.