» rfunc.dll
Overview
Analysis
File Details

rfunc.dll

Citrix System Monitoring Core

Citrix Systems, Inc

File name:

rfunc.dll

Publisher:

Citrix Systems, Inc (signed and verified)

Product:

Citrix System Monitoring Core

Description:

rFunc UDF Library

Version:

2, 1, 5

MD5:

ea5049f8a0cc2bdc2989af4f2cbae0df

SHA-1:

73af8aaeb2cd4cc206a24f12d42ace087b071de7

SHA-256:

12ff29e6c768857796e64fa104b96a1abe463dc4e736eb0c1eb60be007374edd

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 8:38:48 AM UTC (today)

File size:

48.4 KB (49,544 bytes)

Product version:

5.3.4135.6

Original file name:

rfunc.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\citrix\system monitoring\agent\core\firebird\udf\rfunc.dll

Digital Signature

Signed by:

Citrix Systems, Inc

Authority:

VeriSign, Inc.

Valid from:

1/6/2010 12:00:00 AM

Valid to:

3/24/2012 11:59:59 PM

Subject:

CN="Citrix Systems, Inc", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Citrix Systems, Inc", L=Bedford, S=Massachusetts, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

11C6978EA506E9F7E1A3318FC2C32C31

File PE Metadata

Compilation timestamp:

1/27/2011 5:26:36 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0x7F3D

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, FD, 04, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, 6A, 0C, 68, B0, 92, 00, 10, E8, 60, 04, 00, 00, 83, 65, FC, 00, 66, 0F, 28, C1, C7, 45, E4, 01, 00, 00, 00, EB, 23, 8B, 45, EC, 8B, 00, 8B, 00, 3D, 05, 00, 00, C0, 74, 0A, 3D, 1D, 00, 00, C0, 74, 03, 33, C0, C3, 33, C0, 40, C3, 8B, 65, E8, 83, 65, E4, 00, C7, 45, FC, FE, FF, FF, FF, 8B, 45, E4, E8, 62, 04, 00, 00, C3, 8B, FF, 55, 8B, EC, 83, EC, 18, 33, C0, 53, 89, 45... 
[+]

Entropy:

6.5431

Code size:

29.5 KB (30,208 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.