home

rapidui.exe

Perception

This is a setup program which is used to install the application. This is the uninstaller utility registered in the Windows Control Panel for the program EZ Backup Windows Live Mail Pro. The file has been seen being downloaded from www.cmfperception.com.
Publisher:
Perception  (signed and verified)

MD5:
c817db112e585612c060dd168a2056cd

SHA-1:
412e9b0a94901364f1b3922f97723d57ecc90a5a

SHA-256:
33bf7027726d9f321e5871bd2a88650f1535ed44d7c6e9f6d12fce35c390c094

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 1:17:30 AM UTC  (today)

File size:
4.3 MB (4,522,632 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\rapidui.exe

Digital Signature
Signed by:
Perception

Authority:
StartCom Ltd.

Valid from:
2/21/2013 11:23:35 AM

Valid to:
2/23/2015 3:31:48 AM

Subject:
E=chris@cmfperception.com, CN=Perception, O=Perception, L=Ottawa, S=Ontario, C=CA, Description=05hdlBY9aU5F8LhF

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
08E8

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:ozZjRDeIw82vDbAP8GSqDCXU0aOszh9d8ot5x9:olsIwlvHU2qDCkOWTNtv9

Entry address:
0x145810

Entry point:
60, BE, 00, 40, 4D, 00, 8D, BE, 00, D0, F2, FF, C7, 87, 10, 47, 10, 00, 6D, 3C, E7, E6, 57, 83, CD, FF, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 19, 8B, 1E, 83, EE, FC, 11, DB, 72, 10, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 78, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.22 (Delphi) stub

Code size:
456 KB (466,944 bytes)

Program Uninstaller
Program name:
EZ Backup Windows Live Mail Pro

Uninstall string:
C:\Windows\rapidui.exe -ui ezbackupwindowslivemailpro.exe


The file rapidui.exe has been seen being distributed by the following URL.

http://www.cmfperception.com/.../ezbackupwlmailp6_29.exe

Scan rapidui.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.