home

_rs_agent.exe

R-Studio Agent

R-Tools Technology Inc.

It runs as a separate (within the context of its own process) windows Service named “R-Studio Agent”.
Publisher:
R-Tools Technology Inc.  (signed and verified)

Product:
R-Studio Agent

Version:
8, 1, 1, 146

MD5:
dd5595e3700d0ea708dfdd0d6fa77e6f

SHA-1:
6975e8d63cf2ab033119d3bc23ff8e4170357902

SHA-256:
253cc53e74902ce1b7451753b058ec0c6cfb0ec4e7360b847e1205a79325153a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 1:58:40 AM UTC  (today)

File size:
2.9 MB (3,061,384 bytes)

Product version:
8, 1, 1, 146

Copyright:
Copyright (c) 2001-2017 R-Tools Technology Inc.

Trademarks:
Copyright (c) 2001-2017 R-Tools Technology Inc.

Original file name:
R-Studio Agent.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Windows\System32\_rs_agent.exe

Digital Signature
Signed by:
R-Tools Technology Inc.

Authority:
GlobalSign nv-sa

Valid from:
1/15/2015 11:15:39 PM

Valid to:
4/12/2018 10:22:17 PM

Subject:
E=office@r-tt.com, CN=R-Tools Technology Inc., O=R-Tools Technology Inc., L=Richmond Hill, S=Ontario, C=CA

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121034BC58177DC73E683F1AA391D1B3139

File PE Metadata
Compilation timestamp:
1/24/2017 3:51:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x1D9534

Entry point:
E8, FF, F8, 00, 00, E9, 16, FE, FF, FF, 56, 57, 33, F6, BF, 08, AE, 67, 00, 83, 3C, F5, 2C, 53, 66, 00, 01, 75, 1E, 8D, 04, F5, 28, 53, 66, 00, 89, 38, 68, A0, 0F, 00, 00, FF, 30, 83, C7, 18, E8, B4, D4, 00, 00, 85, C0, 59, 59, 74, 0C, 46, 83, FE, 24, 7C, D2, 33, C0, 40, 5F, 5E, C3, 83, 24, F5, 28, 53, 66, 00, 00, 33, C0, EB, F1, 53, 8B, 1D, F0, 33, 61, 00, 56, BE, 28, 53, 66, 00, 57, 8B, 3E, 85, FF, 74, 13, 83, 7E, 04, 01, 74, 0D, 57, FF, D3, 57, E8, C0, 7E, FF, FF, 83, 26, 00, 59, 83, C6, 08, 81, FE, 48...
 
[+]

Code size:
2.1 MB (2,170,880 bytes)

Service
Display name:
R-Studio Agent

Type:
Win32OwnProcess


Scan _rs_agent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.