home

RSAgent.exe

RSAgent

Xionix

Publisher:
Xionix  (signed and verified)

Product:
RSAgent

Version:
7.1.0.5

MD5:
3cc55d09deaecb3e7c919e645a895b69

SHA-1:
1da0c8663d47d163119b173765e19e689cd480ed

SHA-256:
ffdb733da6d9fa861515af407ab26b8299c60c9ad0be04d83d94785f21f03089

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/23/2024 10:32:41 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
riskware program Program.Unwanted.160, is riskware program Program.Unwanted.160
9.0.1.05190

File size:
466.9 KB (478,144 bytes)

Product version:
7.1.0.5

Copyright:
Copyright © 2008

Original file name:
RSAgent.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\regserve\rsagent.exe

Digital Signature
Signed by:
Xionix

Authority:
Thawte, Inc.

Valid from:
11/6/2012 4:00:00 PM

Valid to:
11/12/2013 3:59:59 PM

Subject:
CN=Xionix, O=Xionix, L=Provo, S=Utah, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
13027E07FE6BBFF6FCCBD99DF64B35BF

File PE Metadata
Compilation timestamp:
2/19/2013 3:19:21 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:eztGaVzG+CUTV4WfZa3UxUgiaVzG+CUTV4WfZa3UGjUp3AjjTCgCY2PYQaVzG+CK:Q9PT6C9PT2YCKDYd9PTqC

Entry address:
0x502BE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.2638

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
313 KB (320,512 bytes)

Scan RSAgent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.