Should I block it?

No, this file is 100% safe to run.

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegCloseKey
gdi32.dll
DeleteDC, ExtEscape, CreateDCW
kernel32.dll
GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetConsoleMode, GetConsoleCP, GetLocaleInfoA, VirtualQuery, FreeLibrary, GetModuleFileNameA, GetProcAddress, LoadLibraryA, DeleteCriticalSection, CloseHandle, WaitForSingleObject, SetEvent, GetLocalTime, OutputDebugStringA, OutputDebugStringW, WaitForMultipleObjects, ReleaseMutex, LeaveCriticalSection, EnterCriticalSection, WriteFile, SetFilePointer, Sleep, GetLastError, FileTimeToSystemTime, FileTimeToLocalFileTime, GetFileTime, SetThreadPriority, GetCurrentThread, InitializeCriticalSection, GetComputerNameA, GetModuleHandleA, GetTickCount, SetLastError, CreateEventW, OpenEventW, CreateMutexW, GetCurrentThreadId, DisableThreadLibraryCalls, GetCurrentProcessId, GetVersion, lstrcmpW, WriteConsoleW, SystemTimeToFileTime, GetSystemTimeAsFileTime, QueryPerformanceCounter, QueryPerformanceFrequency, InterlockedExchange, TlsFree, TlsAlloc, TlsGetValue, RaiseException, TlsSetValue, ResumeThread, GetStringTypeW, GetStringTypeA, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetStartupInfoA, GetFileType, SetHandleCount, LCMapStringW, WideCharToMultiByte, LCMapStringA, RtlUnwind, IsValidCodePage, GetOEMCP, GetACP, InterlockedDecrement, InterlockedIncrement, GetCPInfo, GetStdHandle, ExitProcess, VirtualAlloc, VirtualFree, HeapCreate, HeapDestroy, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, FlushFileBuffers, CreateFileA, HeapFree, HeapReAlloc, HeapAlloc, HeapSize, ExitThread, CreateThread, MultiByteToWideChar, GetCommandLineA, GetVersionExA, GetProcessHeap, TerminateProcess
user32.dll
RegisterWindowMessageA, EnumDisplaySettingsW, GetParent, GetCursor, IsWindow, IsWindowVisible, GetWindowRect, IsRectEmpty, GetThreadDesktop, wsprintfW, RegisterWindowMessageW, PostThreadMessageW, PeekMessageW, GetMessageW, DispatchMessageW, SetClipboardViewer, SetTimer, SetWindowsHookExW, SetThreadDesktop, OpenInputDesktop, GetUserObjectInformationW, CloseDesktop, SendMessageW, ChangeClipboardChain, UnhookWindowsHookEx, DestroyWindow, KillTimer, PostMessageW, GetFocus, GetForegroundWindow, GetDesktopWindow, CallNextHookEx, DefWindowProcW
version.dll
VerQueryValueA, GetFileVersionInfoA
Export table
Cleanup
EnableLocalInput
GetBuildNumber
Init
RaguiSetHook
ReHookMirror
ScreenSaverControl
SetHook
SetHookCallback
SetHwnd
SetRestartHook
UnHook

rahook.dll

LogMeIn Rescue by LogMeIn (Signed)

Remove rahook.dll
Version:   7.1.389
MD5:   4997d7f4791d7b53fceb1c69ec2ef088
SHA1:   85cf6053ecd5ee740ba085ebf7335bfff196f3cd
SHA256:   68fe7dacbde5ba2d0d61d44a6621898934faa92a37c0f02c9c26b7b348a78627

Overview

rahook.dll is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by LogMeIn which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Microsoft Windows XP (5.1.2600.196608).

DetailsDetails

File name:rahook.dll
Publisher:LogMeIn, Inc.
Product name:LogMeIn Rescue
Description:LogMeIn Rescue Hook DLL
Typical file path:C:\Documents and Settings\user\Application data\logmein rescue applet\lmir0001.tmp\rahook.dll
File version:7.1.389
Size:173.41 KB (177,576 bytes)
Certificate
Issued to:LogMeIn
Authority (CA):VeriSign
Effective date:Monday, October 5, 2009
Expiration date:Wednesday, October 10, 2012
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE