home

ash64.dll

Rsupport ash

Rsupport Co., Ltd.

Publisher:
Rsupport  (signed by Rsupport Co., Ltd.)

Product:
Rsupport ash

Description:
Hooking module for application share.

Version:
1, 0, 0, 1

MD5:
3d8470d4d6c59a83b6a89743da2f11aa

SHA-1:
c96ce9427553f3e8f4dd6c353f32467fd268d937

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 6:38:38 PM UTC  (today)

File size:
58.8 KB (60,184 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright ⓒ 2007 Rsupport. All rights reserved.

Original file name:
ash.dll

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\Program Files\rsupport\remotecall\ash64.dll

Digital Signature
Signed by:
Rsupport Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
5/26/2008 9:00:00 AM

Valid to:
6/22/2009 8:59:59 AM

Subject:
CN="Rsupport Co., Ltd.", OU=Marketing Team, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Rsupport Co., Ltd.", L=Songpa-gu, S=Seoul, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
545DC75B0189194CF3780A26557CD23B

File PE Metadata
Compilation timestamp:
10/6/2008 1:16:16 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
768:zvBRXqma3KpMxMfgNatQ6n+24CmhnkS55ZDp5lomKXTic+ebLRbN:zBYmSADfRj4CekkATWebtN

Entry address:
0x32D0

Entry point:
48, 83, EC, 28, 85, D2, 48, 89, 5C, 24, 30, 48, 89, 6C, 24, 38, 48, 89, 74, 24, 40, 8B, DA, 48, 8B, E9, 49, 8B, F0, 75, 1E, 39, 15, AB, A3, 00, 00, 75, 59, 33, C0, 48, 8B, 74, 24, 40, 48, 8B, 6C, 24, 38, 48, 8B, 5C, 24, 30, 48, 83, C4, 28, C3, 83, FA, 01, 74, 05, 83, FA, 02, 75, 39, 48, 8B, 05, 1A, C1, 00, 00, 48, 85, C0, 74, 06, FF, D0, 85, C0, 74, 11, 4C, 8B, C6, 8B, D3, 48, 8B, CD, E8, 8A, FD, FF, FF, 85, C0, 75, 16, 33, C0, 48, 8B, 74, 24, 40, 48, 8B, 6C, 24, 38, 48, 8B, 5C, 24, 30, 48, 83, C4, 28, C3...
 
[+]

Entropy:
5.8644

Code size:
42.5 KB (43,520 bytes)

Scan ash64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.