» ramirr2.dll
Overview
Analysis
File Details

ramirr2.dll

RemotelyAnywhere

3am Labs, Inc.

File name:

ramirr2.dll

Publisher:

3am Labs, Inc. (signed and verified)

Product:

RemotelyAnywhere

Description:

RemotelyAnywhere Video Helper

Version:

5.34.436

MD5:

f31420de5dc5d7b5aec6c88224346a09

SHA-1:

eccdf8fed36dc64255f0b301ad17c40c4786a694

SHA-256:

196c4469b21581dc7417a2b4f598af8309f47973d03de164cbdc8480d2784deb

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 7:25:19 AM UTC (today)

File size:

8.8 KB (8,960 bytes)

Product version:

5.34.436

Original file name:

RaMirr2.sys

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\remotelyanywhere\ramirr2.dll

Digital Signature

Signed by:

3am Labs, Inc.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

10/8/2004 1:36:28 AM

Valid to:

10/8/2005 1:36:28 AM

Subject:

CN="3am Labs, Inc.", OU=Secure Application Development, O="3am Labs, Inc.", L=Woburn, S=Massachusetts, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

3EAC5F

File PE Metadata

Compilation timestamp:

8/19/2004 1:44:50 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Native (none required)

Linker version:

7.0

CTPH (ssdeep):

96:fpM/E+5pVtZv3W+YbiL9vQNJvfNFz6vuegOyEA3g0FRzQMLy+Cgzdew5mog+MSNZ:q/JwWvQzvF8WOBA3g0F/L/CldolMpO

Entry address:

0x300

Entry point:

33, C0, C2, 08, 00, CC, 6A, 0C, 68, 70, 07, 01, 00, E8, 3E, 03, 00, 00, 33, F6, 39, 75, 08, 74, 18, 56, 56, 56, FF, 75, 0C, FF, 75, 08, FF, 15, 0C, 07, 01, 00, 8B, 7D, 10, 89, 07, 3B, C6, 75, 04, 33, C0, EB, 3E, 89, 75, FC, 6A, 02, 56, 50, FF, 15, 08, 07, 01, 00, 6A, 10, 56, 56, 6A, 01, 6A, 01, FF, 37, FF, 15, 04, 07, 01, 00, 89, 45, E4, EB, 18, 33, C0, 40, C3, 8B, 65, E8, 8B, 7D, 10, FF, 37, FF, 15, 00, 07, 01, 00, 33, F6, 89, 37, 33, C0, 83, 4D, FC, FF, E8, 11, 03, 00, 00, C2, 0C, 00, CC, 56, 8B, 74, 24... 
[+]

Entropy:

6.4656

Code size:

1.5 KB (1,536 bytes)

Scan ramirr2.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.