home

RSListener.exe

RSListener

Xionix

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘RSListener’. This is installed with RegServe.
Publisher:
Xionix  (signed and verified)

Product:
RSListener

Version:
7.1.0.2

MD5:
3f27aa678219522c2cedca608deaf74a

SHA-1:
e8f7917e102af3f76b10e38ae2f1b843382ce5dc

SHA-256:
99ca9cb2c51285a2b5f875d762bfe2f15951abafaddaa8e5791079210099d88c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 12:24:21 AM UTC  (today)

File size:
160.4 KB (164,288 bytes)

Product version:
7.1.0.2

Copyright:
Copyright © 2009

Original file name:
RSListener.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\regserve\rslistener.exe

Digital Signature
Signed by:
Xionix

Authority:
Thawte, Inc.

Valid from:
11/6/2012 6:00:00 PM

Valid to:
11/12/2013 5:59:59 PM

Subject:
CN=Xionix, O=Xionix, L=Provo, S=Utah, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
13027E07FE6BBFF6FCCBD99DF64B35BF

File PE Metadata
Compilation timestamp:
2/19/2013 5:19:20 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:ukENH/+vVxgOtXW+otw/ToKkWfZ7eXUoLUxGJ0ZV:ukEHaVzG+CUTVkWfZa3UxUgV

Entry address:
0x395E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.2219

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
6.5 KB (6,656 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
RSListener

Command:
C:\Program Files\regserve\rslistener.exe


The file RSListener.exe has been discovered within the following programs.

RegServe  by Xionix Inc.
www.regserve.com
About 6% of users remove it
 
Powered by Should I Remove It?

Scan RSListener.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.