» RAInfo.sys
Overview
Analysis
File Details

RAInfo.sys

RemotelyAnywhere

3am Labs, Inc.

File name:

RAInfo.sys

Publisher:

3am Labs Ltd. (signed by 3am Labs, Inc.)

Product:

RemotelyAnywhere

Description:

RemotelyAnywhere Kernel Information Provider

Version:

5.32.430

MD5:

7754e8ee54c49836985310cedc8c2504

SHA-1:

02f1dee1b6c94533ffdb3776575d9410bcf15d1c

SHA-256:

f750af7b39ec5ee60edcb8b26f7668c374a34006744ffbd5978bb2141ae6cde5

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 7:32:21 AM UTC (today)

File size:

10.9 KB (11,136 bytes)

Product version:

5.32.430

Original file name:

RAInfo.sys

File type:

Driver (Win32 SYS)

Language:

English (United States)

Common path:

C:\Program Files\remotelyanywhere\rainfo.sys

Digital Signature

Signed by:

3am Labs, Inc.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

10/5/2005 2:52:50 PM

Valid to:

10/7/2006 2:36:28 PM

Subject:

CN="3am Labs, Inc.", OU=Secure Application Development, O="3am Labs, Inc.", L=Woburn, S=Massachusetts, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

21E60D

File PE Metadata

Compilation timestamp:

4/12/2004 5:39:30 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Native (none required)

Linker version:

7.0

CTPH (ssdeep):

192:MX1ZejMQNXT83Q2AISTSTT3nqtuWOA3gtL/CldolMKv26:k1ZOM+Q3Q2AIVgALCcdJ

Entry address:

0xC3C

Entry point:

55, 8B, EC, 83, EC, 58, 8B, 45, 0C, 53, 56, 57, 89, 45, B0, 8D, 45, A8, 50, 33, DB, 68, 19, 00, 02, 00, 8D, 45, 0C, 50, C7, 45, A8, 18, 00, 00, 00, 89, 5D, AC, C7, 45, B4, 40, 00, 00, 00, 89, 5D, B8, 89, 5D, BC, FF, 15, D4, 0E, 01, 00, 85, C0, 0F, 8C, EC, 00, 00, 00, BE, 2E, 0C, 01, 00, 8D, 7D, D0, A5, A5, 8D, 45, D0, A5, 50, 8D, 45, F0, 50, 66, A5, FF, 15, E4, 0E, 01, 00, 8B, 35, D0, 0E, 01, 00, 8D, 45, FC, 50, 6A, 10, 8D, 45, C0, 50, 6A, 02, 8D, 45, F0, 50, FF, 75, 0C, FF, D6, 3B, C3, 7D, 0B, 3D, 05, 00... 
[+]

Entropy:

6.5634

Developed / compiled with:

Microsoft Visual C++

Code size:

3.6 KB (3,712 bytes)

Scan RAInfo.sys - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.