home

rcfinal.exe

Version:
4.6.0.178163

MD5:
4dc7b532659aff02957c6290b2598be3

SHA-1:
2ba638ceeefac429951f50c0d2287982ec18d2a7

SHA-256:
e612528c1919ad7d03591594e5e30900b9d59e2026a12641f2330230a77423d6

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/25/2024 4:07:29 AM UTC  (today)

Scan engine
Detection
Engine version

Vba32 AntiVirus
Trojan.MSIL.Zapchast
3.12.26.4

File size:
98.5 MB (103,316,992 bytes)

Product version:
4.6.0.178163

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
11/18/2014 8:47:57 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3145728:l1QLsBQLBKnOZqZORZvJj+04njm/sGCfWC2P85RoQh05JQbkVIOWZZExOM7gS0k7:3QDWfBj40+

Entry address:
0x49F543

Entry point:
E8, 87, 12, 01, 00, E9, 89, FE, FF, FF, 6A, 14, 68, 58, 15, DF, 00, E8, 17, 1D, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B, 4D, 08, 2B, 4D, 0C, 89, 4D, 08, FF, 55, 14, EB, ED, 8B, 45, EC, 89, 45, E4, 8B, 45, E4, 8B, 00, 89, 45, E0, 8B, 45, E0, 81, 38, 63, 73, 6D, E0, 74, 0B, C7, 45, DC, 00, 00, 00, 00, 8B, 45, DC, C3, E8, 59, 37, 00, 00, 8B, 65, E8, C7, 45, FC, FE, FF, FF, FF, E8, 0D, 1D, 00, 00, C2, 10, 00, 6A, 0C, 68, 78, 15, DF, 00, E8, B9, 1C, 00, 00, 83, 65, E4, 00, 8B, 75, 0C, 8B, C6, 0F, AF, 45...
 
[+]

Entropy:
6.2109

Code size:
8.4 MB (8,775,168 bytes)

The file rcfinal.exe has been seen being distributed by the following 50 URLs.

http://download2048.mediafire.com/8ko1e6zjntag/.../RCFinal.exe

http://download1302.mediafire.com/6fjnf112ghcg/.../RCFinal.exe

http://download615.mediafire.com/bf4vruraddng/.../RCFinal.exe

http://download2130.mediafire.com/hrr292o1bdwg/.../RCFinal.exe

http://download637.mediafire.com/3m8yvad9avug/.../RCFinal.exe

http://download649.mediafire.com/hpk6de4ep54g/.../RCFinal.exe

http://download1729.mediafire.com/d9x47cp2qoog/.../RCFinal.exe

http://download15.mediafire.com/lox012ai3dvg/.../RCFinal.exe

http://download1749.mediafire.com/i3422ml3ej1g/.../RCFinal.exe

http://download1235.mediafire.com/ax8q91p5g5xg/.../RCFinal.exe

https://mega.nz/persistent/.../EtpAQRqS

http://download28.mediafire.com/mncktt5ootfg/.../RCFinal.exe

http://download782.mediafire.com/ckgxmo8li5mg/.../RCFinal.exe

http://download873.mediafire.com/0gsg2d2326tg/.../RCFinal.exe

http://download1310.mediafire.com/dyqzcqpdjqyg/.../RCFinal.exe

http://download1042.mediafire.com/5jockgfsloag/.../RCFinal.exe

http://download1891.mediafire.com/sjstm5gs2qgg/.../RCFinal.exe

http://download1411.mediafire.com/jq5a6kx47yeg/.../RCFinal.exe

http://download2218.mediafire.com/ftb111as68wg/.../RCFinal.exe

http://download1821.mediafire.com/wzju51cbcnmg/.../RCFinal.exe

http://download701.mediafire.com/z0a7o7k7nbng/.../RCFinal.exe

http://download1778.mediafire.com/b4s4256yavmg/.../RCFinal.exe

http://download887.mediafire.com/085yj69b7yyg/.../RCFinal.exe

http://download1946.mediafire.com/8f5a6sg9fwwg/.../RCFinal.exe

http://download1464.mediafire.com/y0j7li2lqhgg/.../RCFinal.exe

http://download2009.mediafire.com/kaynd8ex18mg/.../RCFinal.exe

http://download1392.mediafire.com/5ah1o8oc1tgg/.../RCFinal.exe

http://download1946.mediafire.com/gheiwutaw4kg/.../RCFinal.exe

http://download1119.mediafire.com/r9hcxj565bzg/.../RCFinal.exe

http://download1212.mediafire.com/kc96zih26zeg/.../RCFinal.exe

Latest 30 of 498 download URLs

Scan rcfinal.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.