» raidcall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

raidcall.exe

raidcall

RAIDCALL LIMITED.

It runs as a scheduled task under the Windows Task Scheduler. This is installed with RaidCall.

File name:

raidcall.exe

Publisher:

RAIDCALL.COM (signed by RAIDCALL LIMITED.)

Product:

raidcall

Version:

1.1.12786.97

MD5:

1bde8d53465069adbb9498d8a64f9fdd

SHA-1:

a9fa5d960e79e1f2bca7b205a0789efa61a09325

SHA-256:

0e7ec606b3716b4667b593b48ef5bdfbe8df28462492cd8b171093fadc18a9d8

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 6:41:59 PM UTC (today)

File size:

3.3 MB (3,444,424 bytes)

Product version:

1.1.12786.97

Original file name:

raidcall.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\raidcall\raidcall.exe

Digital Signature

Signed by:

RAIDCALL LIMITED.

Authority:

VeriSign, Inc.

Valid from:

1/21/2014 10:00:00 PM

Valid to:

1/22/2015 9:59:59 PM

Subject:

CN=RAIDCALL LIMITED., OU=TECH DEPT., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=RAIDCALL LIMITED., L=BEIJING, S=BEIJING, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

69EF9F7D27C07142D9046D9C43F00324

File PE Metadata

Compilation timestamp:

3/13/2014 6:51:19 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

98304:C2XEj3a/urAyqspx06nFn+P+7twxDX7mUtFl/7D3FR4ypkFzFZ:fK0jtD3n4yE7

Entry address:

0x1D1270

Entry point:

6A, 74, 68, 68, 45, 6B, 00, E8, 98, FB, FF, FF, 33, FF, 89, 7D, E0, 57, 8B, 1D, 00, B2, 67, 00, FF, D3, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03, C8, 81, 39, 50, 45, 00, 00, 75, 12, 0F, B7, 41, 18, 3D, 0B, 01, 00, 00, 74, 1F, 3D, 0B, 02, 00, 00, 74, 05, 89, 7D, E4, EB, 27, 83, B9, 84, 00, 00, 00, 0E, 76, F2, 33, C0, 39, B9, F8, 00, 00, 00, EB, 0E, 83, 79, 74, 0E, 76, E2, 33, C0, 39, B9, E8, 00, 00, 00, 0F, 95, C0, 89, 45, E4, 89, 7D, FC, 6A, 02, FF, 15, E4, B6, 67, 00, 59, 83, 0D, C4, DF, 76, 00, FF, 83... 
[+]

Developed / compiled with:

Microsoft Visual C++ v7.1

Code size:

2.5 MB (2,596,864 bytes)

Scheduled Task

Task name:

{33B30191-C393-43C7-A56A-80B30001159E}

Trigger:

Registration (Runs on registration)

The file raidcall.exe has been discovered within the following programs.

RaidCall by raidcall.com

Some version may be bundled with the OpenCandy distribution and monetization platform.

www.raidcall.com

26% remove it

Scan raidcall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.