home

rsaecrtr.exe

R-Studio Emergency Startup Media Creator

R-Tools Technology Inc.

Publisher:
R-Tools Technology Inc.  (signed and verified)

Product:
R-Studio Emergency Startup Media Creator

Version:
7, 2, 0, 561

MD5:
32f78c79137c6d4f37f664ad06dd4ad5

SHA-1:
28a2ae1dd944373ee2a374d1bcf7db4b10b60af5

SHA-256:
ec1a2fb1698cf0f08fc5c6d854def5a61fc087a56de959f14a4934e7c1aac41b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 4:31:00 PM UTC  (today)

File size:
6.7 MB (7,050,824 bytes)

Product version:
7, 2, 0, 561

Copyright:
Copyright (c) 2001-2014 R-Tools Technology Inc.

Trademarks:
Copyright (c) 2001-2014 R-Tools Technology Inc.

Original file name:
R-Studio Emergency Startup Media Creator.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\r-studio emergency\rsaecrtr.exe

Digital Signature
Signed by:
R-Tools Technology Inc.

Authority:
GlobalSign nv-sa

Valid from:
3/12/2012 2:22:17 PM

Valid to:
3/13/2015 2:22:17 PM

Subject:
E=office@r-tt.com, CN=R-Tools Technology Inc., O=R-Tools Technology Inc., L=Richmond Hill, S=Ontario, C=CA

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121C9EF7B072300B6FB5D1D9B0424EA61F6

File PE Metadata
Compilation timestamp:
4/3/2014 7:57:28 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:lVy6W8vVMjE5KsTbDvaqdFvi4h7zc64LArGFan4:9vvEsTXagFq+x4KGwn4

Entry address:
0x822DC

Entry point:
E8, E5, F2, 00, 00, E9, 16, FE, FF, FF, 6A, 0C, 68, 50, 1B, 4C, 00, E8, 02, 22, 00, 00, 6A, 0E, E8, D0, 11, 00, 00, 59, 83, 65, FC, 00, 8B, 75, 08, 8B, 4E, 04, 85, C9, 74, 2F, A1, 2C, CB, 4C, 00, BA, 28, CB, 4C, 00, 89, 45, E4, 85, C0, 74, 11, 39, 08, 75, 2C, 8B, 48, 04, 89, 4A, 04, 50, E8, 5C, 9A, FF, FF, 59, FF, 76, 04, E8, 53, 9A, FF, FF, 59, 83, 66, 04, 00, C7, 45, FC, FE, FF, FF, FF, E8, 0A, 00, 00, 00, E8, F1, 21, 00, 00, C3, 8B, D0, EB, C5, 6A, 0E, E8, 85, 10, 00, 00, 59, C3, 6A, 0C, 68, 70, 1B, 4C...
 
[+]

Entropy:
7.7849  (probably packed)

Code size:
680 KB (696,320 bytes)

Scan rsaecrtr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.