home

kaxRemote.DLL

kaxRemote Module

Kaseya

Publisher:
Kaseya  (signed and verified)

Product:
kaxRemote Module

Description:
Kaseya Remote Control Relay Helper Module

Version:
4, 6, 4, 3

MD5:
6dfcb6731fba50a0ec3b012b90dbed74

SHA-1:
a23f7428d02f3834f24309df27b2163cca2b7400

SHA-256:
b3aff03dc74c37c1adda5c1d7ca016ca11c6e97d2e5e7343b4913534ce659c23

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/20/2024 2:23:44 PM UTC  (today)

Scan engine
Detection
Engine version

F-Secure
Adware.BrowseFox.BJ
5.13.68

File size:
61.7 KB (63,152 bytes)

Product version:
4, 6, 4, 3

Copyright:
Copyright © 2003-2007 by Kaseya, All Rights Reserved

Original file name:
kaxRemote.DLL

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Windows\System32\kaxremote.dll

Digital Signature
Signed by:
Kaseya

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
4/30/2006 7:00:00 PM

Valid to:
6/16/2008 6:59:59 PM

Subject:
CN=Kaseya, OU=SECURE APPLICATION DEVELOPMENT, O=Kaseya, L=Milpitas, S=California, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
59BAE4338A5F9B2C28CEDEAC9988B569

File PE Metadata
Compilation timestamp:
1/10/2007 3:49:25 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
768:wcBlSyuycuCxy33OzXu9Q8wwqNsvHFn42zeQO2pltxYnX6JSqlonCL36:xbSyu7uCcuE5VqNsvHR42z1zWKJn2nC+

Entry address:
0x7837

Entry point:
55, 8B, EC, 56, 8B, 75, 0C, 83, FE, 01, 74, 05, 83, FE, 02, 75, 16, A1, F4, B3, 00, 10, 85, C0, 74, 0D, FF, 75, 10, 56, FF, 75, 08, FF, D0, 85, C0, 74, 44, 83, FE, 01, 75, 05, E8, 0D, FD, FF, FF, 57, FF, 75, 10, 56, FF, 75, 08, E8, 63, D1, FF, FF, 85, F6, 8B, F8, 75, 07, E8, 01, FE, FF, FF, EB, 05, 83, FE, 03, 75, 18, 85, FF, 74, 14, A1, F4, B3, 00, 10, 85, C0, 74, 0B, FF, 75, 10, 56, FF, 75, 08, FF, D0, 8B, F8, 8B, C7, 5F, 5E, 5D, C2, 0C, 00, 6A, 08, 68, 20, 9B, 00, 10, E8, C5, 0B, 00, 00, 83, 65, FC, 00...
 
[+]

Entropy:
5.8765

Developed / compiled with:
Microsoft Visual C++

Code size:
32 KB (32,768 bytes)

Scan kaxRemote.DLL - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.