home

rcd2.exe

Martech (grexorsoft)

This is a setup program which is used to install the application. The file has been seen being downloaded from martech.pl.
Publisher:
Martech (grexorsoft)

Description:
RCD

Version:
0.0.7.4

MD5:
1ae502a350ff734668f4a4cda7c782b7

SHA-1:
eb536b5ddef927db6fe4c4a9448100623a3ed7cd

SHA-256:
90a6ed6bc6c3cdc142f697e982c57e2ca0973abfea3b355b116b010c6513e04f

Scanner detections:
5 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/25/2024 6:42:57 AM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
Trojan.Win32.Themida
4.0.3.14518

Comodo Security
UnclassifiedMalware
18278

ESET NOD32
Win32/Packed.Themida (variant)
8.9804

McAfee
Artemis!1AE502A350FF
5600.7126

Rising Antivirus
PE:Malware.Packed!1.9C4E
23.00.65.14516

File size:
6.8 MB (7,159,808 bytes)

Product version:
1.0.0.0

Copyright:
Martech (grexorsoft)

File type:
Executable application (Win32 EXE)

Language:
English (United Kingdom)

Common path:
C:\users\{user}\downloads\rcd2.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:fLiWjd/yMg91tQ1TxtIzUEJGMrlDekhXH:jiSd/7EcxtoUEgkhX

Entry address:
0xAB0000

Entry point:
50, 89, 34, 24, 89, E6, 51, B9, 04, 00, 00, 00, 01, CE, 59, 83, EE, 04, 87, 34, 24, 5C, 53, 89, E3, 55, BD, 04, 00, 00, 00, 01, EB, 5D, 83, EB, 04, 87, 1C, 24, 5C, 89, 04, 24, 55, 89, E5, 81, C5, 04, 00, 00, 00, 81, ED, 04, 00, 00, 00, 87, 2C, 24, 8B, 24, 24, 89, 1C, 24, E8, 01, 00, 00, 00, CC, 8B, 04, 24, 50, 89, E0, 05, 04, 00, 00, 00, 83, C0, 04, 87, 04, 24, 8B, 24, 24, 81, EC, 04, 00, 00, 00, 89, 0C, 24, 89, C1, 89, CB, 8B, 0C, 24, 81, C4, 04, 00, 00, 00, 56, BE, FA, 6B, 9F, 2C, 81, E6, D9, 6B, 6C, 67...
 
[+]

Code size:
2.2 MB (2,295,296 bytes)

The file rcd2.exe has been seen being distributed by the following URL.

http://martech.pl/support/.../rcd2.exe

Scan rcd2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.