home

rainlendar-pro-2.9-32bit.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from rainlendar-pro.softonic.com and multiple other hosts.
MD5:
8cd3a7bc77eebfbbb10dac0e77bdd974

SHA-1:
717c7543282a2ab31fbc1a55a904d1ef774472c3

SHA-256:
25cd98f483916bba85cef3dbc98c73f2e5985b0950af3281a19fb8b56176d609

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 5:41:17 PM UTC  (today)

File size:
8.9 MB (9,300,046 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\rainlendar-pro-2.9-32bit.exe

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:YzphfAIcLR7nGTwRbxpFWVs/aPy+sxNv2iQOA:0hfU7GTOboVG/+ovIOA

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file rainlendar-pro-2.9-32bit.exe has been discovered within the following program.

Rainlendar2 (remove only)  by rainlendar.net
Publisher's description - “Rainlendar is a customizable calendar application which stays out of your way but keeps all your important events and tasks always visible on your desktop. Rainlendar supports events and tasks which both are kept in separate lists.”
www.rainlendar.net/cms/index.php
4% remove it
 
Powered by Should I Remove It?

The file rainlendar-pro-2.9-32bit.exe has been seen being distributed by the following 4 URLs.

http://rainlendar-pro.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWv B6Q8 mgpLNhZYPVoOQv5RcrSRFs9QChqYHscfTnJ8BmlS3qSaOTtBBAVV/.../iQ0WKWKVLWbxVPXDJV7eyse5pzdN2gdA4=

http://gsf-cf.softonic.com/717/c75/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65514&instance=softonic_es&type=PROGRAM&Expires=1441788004&Signature=cIUj6~imLZcGYmJRnCDfTE5M9y4Xw5ep-ymWrOAB0W0DlU-IsWIk5F~IuU3K-xfleP1WyYc1VTlUh4589aAnydC42OqUsDhj0L3T2bx8EL~NL38Hf7qJBmZ5X9GvVox9u65lGpc8feJQWCrVUjUppkn3lv~QDJ02ASAh7RoJR6k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainlendar-Pro-2.9-32bit.exe

http://gsf-cf.softonic.com/717/c75/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65514&instance=softonic_es&type=PROGRAM&Expires=1440058853&Signature=bP0veJ1SqrBRO-3ARL~qNxp74Gxyjs557~TabohNBz3Z2FmtEkcI4OBupNrUUSepacX0yr9Y2PQklILJwfV6ZWkOMojUAdNO5A9DkyP28jVm9SnBpL2Th0eKnoadoDfnFPsJ~apGXTag8hyCgCKx648VlPzw-ebDaa7oO4~KFpk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainlendar-Pro-2.9-32bit.exe

http://www.rainlendar.net/.../Rainlendar-Pro-2.9-32bit.exe

Scan rainlendar-pro-2.9-32bit.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.