home

ra_sc.exe

3am Labs, Inc.

Publisher:
3am Labs, Inc.  (signed and verified)

MD5:
62e648b4894aa17fcdcaefec173ae8a5

SHA-1:
e880d6e54173c7f2bcfc797d70e6de48d40c4abe

SHA-256:
50fd297ca96d88e8898c6bf40034244f0614a64a9a02c4f4a90c71ba286e73b9

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/19/2024 7:57:31 PM UTC  (today)

Scan engine
Detection
Engine version

IKARUS anti.virus
not-a-virus:RemoteAdmin.Win32.RemotelyAnywhere.a
15.11.22

File size:
167.8 KB (171,784 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\remotelyanywhere\ra_sc.exe

Digital Signature
Signed by:
3am Labs, Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
10/5/2005 2:52:50 PM

Valid to:
10/7/2006 2:36:28 PM

Subject:
CN="3am Labs, Inc.", OU=Secure Application Development, O="3am Labs, Inc.", L=Woburn, S=Massachusetts, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
21E60D

File PE Metadata
Compilation timestamp:
8/28/2002 9:47:23 AM

OS version:
1.11

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.18

CTPH (ssdeep):
3072:zBW3xb30HtAYEmu0zgG2vtRReY8Ys7yvWUrkRWkucTAs3VJQwnShmMztsQr:zBM30Sxmum/2vzReY8RUps3VJQwnSR

Entry address:
0x18116

Entry point:
E9, 75, 20, 00, 00, 03, 10, 40, 00, 57, 41, 54, 43, 4F, 4D, 20, 43, 2F, 43, 2B, 2B, 33, 32, 20, 52, 75, 6E, 2D, 54, 69, 6D, 65, 20, 73, 79, 73, 74, 65, 6D, 2E, 20, 28, 63, 29, 20, 43, 6F, 70, 79, 72, 69, 67, 68, 74, 20, 62, 79, 20, 53, 79, 62, 61, 73, 65, 2C, 20, 49, 6E, 63, 2E, 20, 31, 39, 38, 38, 2D, 32, 30, 30, 30, 2E, 20, 41, 6C, 6C, 20, 72, 69, 67, 68, 74, 73, 20, 72, 65, 73, 65, 72, 76, 65, 64, 2E, 00, 00, 00, 00, 56, 57, 8B, 44, 24, 0C, 8B, 74, 24, 10, 8B, 4C, 24, 14, 39, C6, 74, 3D, 73, 27, 8D, 14...
 
[+]

Entropy:
6.5736

Packer / compiler:
WATCOM C/C++, 0x32 Run-Time System, 0x1988-1995

Code size:
129.5 KB (132,608 bytes)

Scan ra_sc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.