home

Rainlendar2.exe

Rainlendar2

Rainy

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Rainlendar2’.
Publisher:
Rainy  (signed and verified)

Product:
Rainlendar2

Description:
Rainlendar2

Version:
2, 13, 0, 0

MD5:
6d155b4422814c5f1be045469c8e9248

SHA-1:
22bb27746af21f79439530afedf68255916834ad

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 6:11:55 AM UTC  (today)

File size:
2.8 MB (2,917,952 bytes)

Product version:
2, 13, 0, 0

Copyright:
Copyright (C) 2006-2014 Kimmo 'Rainy' Pekkola

Original file name:
Rainlendar2.exe

File type:
Executable application (Win32 EXE)

Language:
Finlandese

Digital Signature
Signed by:
Rainy

Authority:
COMODO CA Limited

Valid from:
3/7/2013 1:00:00 AM

Valid to:
3/8/2015 12:59:59 AM

Subject:
CN=Rainy, O=Rainy, STREET=Kotkansiivenkatu 3 C 6, L=Tampere, S=PIRKANMAA, PostalCode=33720, C=FI

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CBAA8928B1F44D447F6BED73C54B77B7

File PE Metadata
Compilation timestamp:
7/22/2014 5:28:39 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
49152:aPhnNsFOc5FY2F+UWpsYK9NZTuIwjKLzOV8CHbWeLUrjIjEBpzbh7Hh4j7/kFOST:aPhnNsFOc5FY2F+UWpsYK9NZTuIwjKLD

Entry address:
0x18AB79

Entry point:
E8, 80, 04, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, D8, 49, 64, 00, E8, 11, 02, 00, 00, 33, F6, 89, 75, E4, 89, 75, E0, FF, 15, 40, F1, 5C, 00, 0F, B7, D8, 89, 75, FC, 64, A1, 18, 00, 00, 00, 8B, 50, 04, 8B, FE, BE, 80, 18, 67, 00, 8B, CA, 33, C0, F0, 0F, B1, 0E, 85, C0, 74, 0B, 3B, C2, 75, F0, 33, F6, 46, 8B, FE, EB, 03, 33, F6, 46, 39, 35, 84, 18, 67, 00, 75, 0A, 6A, 1F, E8, BA, 02, 00, 00, 59, EB, 3B, 83, 3D, 84, 18, 67, 00, 00, 75, 2C, 89, 35, 84, 18, 67, 00, 68, AC, 26, 5D, 00, 68, 9C, 26, 5D, 00, E8...
 
[+]

Code size:
1.8 MB (1,889,792 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Rainlendar2

Command:
C:\rainlendar_2.13\rainlendar pro_2.13_portable\rainlendar2.exe


Scan Rainlendar2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.