» RAinfo.sys
Overview
Analysis
File Details
Programs (1)

RAinfo.sys

RemotelyAnywhere

LogMeIn, Inc.

This is installed with LogMeIn.

File name:

RAinfo.sys

Publisher:

LogMeIn, Inc. (signed and verified)

Product:

RemotelyAnywhere

Description:

RemotelyAnywhere Kernel Information Provider

Version:

11.1.0.3220

MD5:

2fbc0bd114db80f013bd1a24b3c5bc1a

SHA-1:

1f820ff6030d15dbf18b933e0f4231d7e777fd61

SHA-256:

63d761619e2211681f8270f55bedf3043d35bf8c7a8b6cc1a82c515a41a1c140

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/27/2024 2:43:24 AM UTC (today)

File size:

27.2 KB (27,888 bytes)

Product version:

11.1.0.3220

Original file name:

RAinfo.sys

File type:

Driver (Win32 SYS)

Language:

English (United States)

Common path:

C:\Program Files\logmein\x86\rainfo.sys

Digital Signature

Signed by:

LogMeIn, Inc.

Authority:

DigiCert Inc

Valid from:

6/17/2015 7:00:00 PM

Valid to:

6/22/2018 7:00:00 AM

Subject:

CN="LogMeIn, Inc.", O="LogMeIn, Inc.", L=Boston, S=Massachusetts, C=US, PostalCode=02210, STREET=320 Summer Street, SERIALNUMBER=3830661, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization

Issuer:

CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

080D35880102E23D2340F69EB3C0E561

File PE Metadata

Compilation timestamp:

1/10/2017 10:29:43 AM

OS version:

6.3

OS bitness:

Win32

Subsystem:

Native (none required)

Linker version:

12.0

Entry address:

0x1450

Entry point:

8B, FF, 55, 8B, EC, E8, A6, 2B, 00, 00, 5D, E9, 1F, FF, FF, FF, 8B, FF, 55, 8B, EC, 56, BE, E8, 30, 40, 00, 57, 8B, CE, BF, E8, 30, 40, 00, 33, C0, 3B, CF, 73, 3C, 83, 3E, 2C, 75, 32, 8B, 46, 20, 56, FF, 35, 44, 37, 40, 00, 89, 35, EC, 30, 40, 00, FF, 75, 08, 85, C0, 74, 09, 68, F8, 1D, 40, 00, FF, D0, EB, 05, E8, 55, 09, 00, 00, 85, C0, 7C, 0E, 83, C6, 2C, 3B, F7, 72, CB, EB, 05, B8, 04, 00, 00, C0, 5F, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, A1, EC, 30, 40, 00, B9, E8, 30, 40, 00, 56, 8B, F1, 3D, E0, 30... 
[+]

Entropy:

6.8323

Code size:

5 KB (5,120 bytes)

The file RAinfo.sys has been discovered within the following programs.

LogMeIn by LogMeIn, Inc.

LogMeIn remote access products use a proprietary remote desktop protocol that is transmitted via SSL. An SSL certificate is created for each remote desktop and is used to cryptographically secure communications between the remote desktop and the accessing computer.

www.logmein.com

1% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.