home

raidcall.exe

RAIDCALL LIMITED.

This is a setup and installation application. The file has been seen being downloaded from raidcall.soft32.es and multiple other hosts.
Publisher:
RAIDCALL LIMITED.

Description:
RaidCall 7.3.6 Installation

Version:
7.3.6

MD5:
261cb8b8f4c468216b291d9bcb0b3d81

SHA-1:
342f454904119dccb2b6f934fbd66707649517a5

SHA-256:
99f1432f2b406a0f0a9eec06718393a40e64e097b4dd0810451d734d767132d3

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/16/2024 8:57:19 AM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
HEUR/QVM05.1.Malware.Gen
1.0.0.1015

File size:
8 MB (8,429,958 bytes)

Copyright:
RAIDCALL LIMITED.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\raidcall.exe

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:OtAaYaAmEHjrGTRS8Ye7XMTja4Hv3ftmgdeouk:MmH2Tc8YeDMTjawv3Ygnuk

Entry address:
0x25468

Entry point:
55, 8B, EC, 83, C4, F0, B8, 88, 53, 42, 00, E8, 24, F2, FD, FF, B8, C8, 54, 42, 00, E8, 2A, 1C, FE, FF, 8B, 15, 40, 88, 42, 00, 89, 02, 8B, 15, 40, 88, 42, 00, 8B, 12, A1, 48, 88, 42, 00, E8, E4, D3, FF, FF, 8B, 15, 40, 88, 42, 00, 8B, 12, A1, DC, 87, 42, 00, E8, 7A, 64, FF, FF, A1, 40, 88, 42, 00, E8, AC, 4E, FE, FF, E8, DF, E0, FD, FF, 00, 00, 00, FF, FF, FF, FF, 01, 00, 00, 00, 2A, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
145.5 KB (148,992 bytes)

The file raidcall.exe has been seen being distributed by the following 7 URLs.

http://raidcall.soft32.es/get/file/.../1226784?lp=dsa&tg=es&kw=_cat:soft32.es&mt=b&ad=31507505042&pl=&ds=s&uid=1422068596294a0d99b91aa8e97d0aa4c4869e3938&_ga=2069249413.1422068258&gclid=CjwKEAiA_4emBRCxi8_f2cWWjFcSJAB-v1qy2biS0moi8rCIzKbqWTflwbkWf_1O2_iYGXIsqRoCkhoCDojw_wcB

http://download801.mediafire.com/77w5pebodcfg/.../raidcall1.exe

http://download1737.mediafire.com/3fjldnurr0yg/.../raidcall1.exe

http://down01.waxoo.com/6fd7db81744e92f7b6c01580675420f3.exe/raidcall?id_file=653&expire=1403572479/581/.../exe

https://mega.nz/persistent/.../LlEhGBRB

http://www.raidcall.es/.../raidcall.exe

http://raidcall.es/.../raidcall.exe

Scan raidcall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.