» RdaUI.DLL
Overview
Analysis
File Details
Behaviors (1)

RdaUI.DLL

Pivotal eRelationship Active Access - User Interface Classes and Event Handling

Pivotal Corporation

File name:

RdaUI.DLL

Publisher:

Pivotal Corporation. (signed by Pivotal Corporation)

Product:

Pivotal eRelationship Active Access - User Interface Classes and Event Handling

Description:

This is the ePower Lifecycle Engine Active Access Module.

Version:

5, 9, 2, 0015

MD5:

a131b681c8b4385d732c2827fb7685a5

SHA-1:

311f2e031f0e5175dabb3aeba030f6057c3385f5

SHA-256:

35ea383d4bb371100059d048fa1449c02f4de1a2e4632aed72b29b014183850e

Scanner detections:

1 / 68

Status:

Inconclusive (not enough data for an accurate detection)

Analysis date:

4/26/2024 3:01:31 PM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

TR/Rootkit.Gen

7.11.30.172

File size:

3.3 MB (3,507,592 bytes)

Product version:

5, 9, 2, 0

Original file name:

RdaUI.DLL

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\windows\downloaded Program Files\rdaui.dll

Digital Signature

Signed by:

Pivotal Corporation

Authority:

VeriSign, Inc.

Valid from:

9/13/2006 1:00:00 AM

Valid to:

9/19/2009 12:59:59 AM

Subject:

CN=Pivotal Corporation, OU=Research & Development, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Pivotal Corporation, L=Vancouver, S=BC, C=CA

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

6E029B0F329AB4E6E8C89EA152A7D0A5

File PE Metadata

Compilation timestamp:

6/20/2008 12:44:44 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

98304:uHc3gavIK397oU6P8kS/xJOpf9rsrafcszHVW:uHc31v9iU6kkS/xJOpVTUW4

Entry address:

0x2252CF

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, F4, 92, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 55, 8B, EC, 8B, 4D, 08, 8B, C1, 66, 8B, 11, 41, 41, 66, 85, D2, 75, F6, 49, 49, 83, 7D, 10, 00, 56, 74, 1B, 8B, 75, 0C, 0F, B7, 16, FF, 4D, 10, 66, 89, 11, 41, 41, 46, 46, 66, 85, D2, 74, 0A, 83, 7D, 10, 00, 75, E8, 66, 83, 21, 00, 5E, 5D, C3, CC, CC, CC, 55, 8B, EC, 57, 56, 8B, 75, 0C, 8B, 4D, 10, 8B, 7D, 08, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, A4, 01, 00... 
[+]

Entropy:

6.5611

Code size:

2.4 MB (2,539,520 bytes)

ActiveX Install

Name:

{0D2215F3-4F6D-4D8C-98D2-B63D5A6289D1}

Scan RdaUI.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.