home

aticir.sys

ATI Theater Remote Receiver

JacTek Multimedia Co.,Ltd.

It runs as a Windows 64-bit kernel mode device driver named “ATI Remote Receiver Service”.
Publisher:
ATI Technologies Inc.  (signed by JacTek Multimedia Co.,Ltd.)

Product:
ATI Theater Remote Receiver

Description:
ATI Remote Receiver Driver

Version:
6.14.10.397

MD5:
3f05d0d12d6cdbbdc1f7d5270254b3b8

SHA-1:
90ac4a03a05d9228862ddcc97fb436363255e96c

SHA-256:
835e38bc7544efd2bb0856ef388b834f97ee123ffbeff06a00010674e59f96c1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 3:53:11 PM UTC  (today)

File size:
34 KB (34,824 bytes)

Product version:
6.14.10.397

Copyright:
(C) ATI Technologies. All rights reserved.

Original file name:
aticir.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\aticir.sys

Digital Signature
Signed by:
JacTek Multimedia Co.,Ltd.

Authority:
GlobalSign nv-sa

Valid from:
10/29/2010 3:15:18 AM

Valid to:
10/29/2011 3:15:18 AM

Subject:
CN="JacTek Multimedia Co.,Ltd.", O="JacTek Multimedia Co.,Ltd.", C=TW

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012BF5A1F51E

File PE Metadata
Compilation timestamp:
6/27/2010 8:03:01 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
768:7tMXN5WvmIYmLIm7yt+MnC0C6L+Tu35ItC+0ip9O:7tqTWeIym+tU0C6/pItC+0ip9O

Entry address:
0x1F00

Entry point:
4C, 8B, DC, 49, 89, 5B, 08, 49, 89, 73, 10, 57, 48, 83, EC, 40, 48, 8B, 41, 30, 48, 8B, F1, 48, 8D, 0D, F2, E3, FF, FF, 48, 89, 48, 08, 48, 8D, 05, 07, E4, FF, FF, 49, 8D, 4B, D8, 48, 89, 46, 68, 48, 8D, 05, 18, FC, FF, FF, 48, 8B, FA, 48, 89, 86, 48, 01, 00, 00, 48, 8D, 05, F7, E3, FF, FF, 48, 89, 86, 20, 01, 00, 00, 48, 8D, 05, E9, FE, FF, FF, 48, 89, 86, E8, 00, 00, 00, 33, C0, 49, 89, 43, E0, 49, 89, 43, E8, 49, 89, 43, D8, 49, 89, 43, F0, C7, 44, 24, 20, 01, 00, 00, 00, 49, 89, 73, E0, 49, 89, 53, E8...
 
[+]

Code size:
16.8 KB (17,152 bytes)

Driver
Display name:
ATI Remote Receiver Service

Service name:
AtiIrRcvr

Type:
Kernel device driver (KernelDriver)


Scan aticir.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.