AmbRunE.dll
AmbRun Endpoints Dynamic Link Library by Creative Technology Ltd
| Version: | 1, 1, 2, 0 |
| MD5: | 8942fd2fc4fd4898f9be5915f577fff1 |
| SHA1: | dfd44e0ad073670af8eb8af170b2b9d9852c885e |
| SHA256: | aba6e6a1d79bbf21233e24778b25e5a44d6b39d62d8bb329cabec976af1dc8e1 |
Overview
ambrune.dll executes as a process with the local user's privileges typically within the hosted context of
rundll32.exe (Windows host process (Rundll32) by Microsoft). It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC).
Details
| File name: | ambrune.dll |
| Publisher: | Creative Technology Ltd. |
| Product name: | AmbRun Endpoints Dynamic Link Library |
| Typical file path: | C:\Windows\System32\ambrune.dll |
| File version: | 1, 1, 2, 0 |
| Size: | 17.5 KB (17,920 bytes) |
| Digital DNA |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Behaviors
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'RunDLLEntry' → C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00003676% | |
| Kernel CPU: | 0.00001088% | |
| User CPU: | 0.00002588% | |
| Kernel CPU time: | 51 ms/min | |
| CPU cycles: | 470,960/sec | |
| Memory |
| Private memory: | 7.06 MB | |
| Private (maximum): | 7.31 MB | |
| Private (minimum): | 3.79 MB | |
| Non-paged memory: | 7.06 MB | |
| Virtual memory: | 78.77 MB | |
| Virtual memory (peak): | 80.51 MB | |
| Working set: | 3.99 MB | |
| Working set (peak): | 7.34 MB | |
| Page faults: | 2,266/min | |
| I/O |
| I/O read transfer: | 13 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O other transfer: | 13 Bytes/sec | |
| I/O other operations: | 1/sec | |
| Resource allocations |
| Threads: | 5 | |
| Handles: | 121 | |
| GUI GDI count: | 16 | |
| GUI GDI peak: | 17 | |
| GUI USER count: | 8 | |
| GUI USER peak: | 8 | |
Process properties
Threads
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
66.67% |
|
| Windows 8 Pro |
22.22% |
|
| Windows 8.1 Pro |
11.11% |
|
Distribution by country
United States installs about 66.67% of AmbRun Endpoints Dynamic Link Library.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Alienware |
50.00% |
|
| Dell |
50.00% |
|
