home

Rainmeter-2.5.exe

Rainmeter

Rainmeter

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Rainmeter  (signed and verified)

Product:
Rainmeter

Description:
Rainmeter Installer

Version:
2.5.0

MD5:
05ffdc4640d44ea53b197e1432e045c3

SHA-1:
4ac74707099e3f55e398bd60d9a735eb7c691e79

SHA-256:
d9635ba01db5b7a72c4627a2b27bb33f43adcfdbe370d5f64c2752e07bb81de9

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/27/2024 1:26:29 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Detection.Undefined
8.0.319.0

Rising Antivirus
PE:Malware.XPACK/RDM!5.1
23.00.65.131208

File size:
1.3 MB (1,386,624 bytes)

Product version:
2.5.0.1842

Copyright:
Copyright (C) 2009-2012 - All authors

Original file name:
Rainmeter-2.5.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\rainmeter-2.5.exe

Digital Signature
Signed by:
Rainmeter

Authority:
Unizeto Technologies S.A.

Valid from:
12/12/2012 7:00:00 PM

Valid to:
12/12/2013 7:00:00 PM

Subject:
E=team@rainmeter.net, CN="Open Source Developer, Rainmeter", O=Rainmeter, C=FI

Issuer:
CN=Certum Level III CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
1395CEE64DCCC133483E382CC0F346E8

File PE Metadata
Compilation timestamp:
2/24/2012 2:19:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:Yzkv64LrpDQkInGrSRTJy4VN9pZRRPK837u5YdspDb+rBtbHbQvPnWMxNkVGPiYA:dvlLr4nosn9p7RS0q58C+/HbQ3nWkPi9

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Entropy:
7.9699

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file Rainmeter-2.5.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_es&type=PROGRAM&Expires=1483846993&Signature=G4lk5WpQotYhOpcmM5XhWgEl4WHaP-s0bQNwAftmzqQDgfylUqr6exIBmIO-6NqJqZRTcvk6OjyY1k9Xh4bLCX5S8cd77O0kAJ0DU7inH8Oq2nN4w5bDmPOJubAcvHboo-YCCJ8ADqS1ZDesJ~DHUxjtrS4Ds02nEb~8is6JbPE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://morssolaplz.tistory.com/.../cfile9.uf@251975465312B66629C472.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_en&type=PROGRAM&Expires=1452996411&Signature=fj3~cQy4LQVI9tPWKgj7qDA0HSjepnzEijrnbBECM5DXehgHI-eKDshFJYU-emCo3HmNzuBlezug9JvVKUZhQXsdCORcj53pt0qNKQXuIJzGu-TNCEC3NekdWRxQRiCm7MkKiZUgUFieCeroPPFsh7eKB~ASIm1P6L16sxmV2Ow_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_br&type=PROGRAM&Expires=1479350882&Signature=DYFPC2MRgW94DVZi2z9afFZ1uwfYh7IvVj7-Bpov6cZL6Em-7XGCySJgVnBBfoYftOEeZJBIIAR8TgXwGcPXNlAmfImHVy0ACQXmufdF0iqD~lSkEQ6CFPRegebeBqVv1K28WcxoS~YVOSH7hok2HpetHQRWPAJDdEFTZb4pACM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_es&type=PROGRAM&Expires=1486720145&Signature=fUUSxjG5QPh6oX6tqUshfKIW~AaV6j13ep5IeR3SCmO0XXVn50ondkZuN780VS7luBWNkrIDnSUSRvH5Jiug8Hh8iJ1qNEXOm-vyEG4eRK7-1rT0qCd0RL4Og2Nka3emjU0XyZlJ0fADcnORUv~RTr-xUctnrfo1AIHEUaWOwpo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_es&type=PROGRAM&Expires=1446834763&Signature=E1wbl5Qh5TdT0oPyz3vHk3jrRhY2moBkpsIemjl2HHJznKQaJZF3FEgCKyyuUlxa4YJYFOvchtsMyRyTVQAkAEGgfoTPhtmfeSt1oGgo5~YJuV6yIt3Cj3GS8LIBocJI6B1ul~NtmOXR1CiI0guojngSbL-UWR3e-ApabISl8jM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_es&type=PROGRAM&Expires=1442131971&Signature=CYP4EM303a-aINfyXUOiA-DVhFpHkpBz04BZePdRwUer4r3gmbmWaIzGhXiKAuItKQZEP5XFLaSWCpwfkpSxwRVKxXCPifag5WGxaE9RrqLUolN4mawHxagN4Jq7TblPfg0AwnC41Hb0JuUA1RALzhz0eaYdn0BE~LeDI6K~ztw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_es&type=PROGRAM&Expires=1421734271&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=MDQ6EIA4uQVs~wbyv34-BdiAdKVb1gT8iGrDwbhWMhRGtJ-ODuX4XEwWU~~KGri9kE4RmQhhBRPBFbZI2-4jXGrbQJx-jrjEkotWYpQ6p-f9kAh-vd7OwuqXrKio-yztBtSHk7Gvm~2W5JpXFQ9KOYbd-fs9Dp9JczcmPy-SdFc_&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_br&type=PROGRAM&Expires=1476060321&Signature=JQZ4JOWT2VynN-h2mEb1IXDEB2op2nfMRFnXaAJMWi9-LLrlg52Fyh~wpXgxJZCcegNWM2O3hVtCokyvJeO75SmgJX9AETihpCo6AkQzg1heYT~XlrWqUwaXZO5VI4DVxOfNOMDTBuvXcsgTLkVL8zvJkuG2ZtISWfSfzeCsm6w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_es&type=PROGRAM&Expires=1464181785&Signature=PTUaaJYIAnLe2BlINAprtZLlVVijGPGT1gZuL~KZfe3ymSsacqyowLXG1t6Frn2LtfobQ9h6R0zAmr5ZqP1nit8DQSqbUQfpiS~XRuO3ldI35lp30YetGcLWF3t3Cqu5EZ65uRUb7t6cky65U3H9BzT1FgIyvVFW40dbsoptTHk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://download1595.mediafire.com/8jib70wco4qg/.../Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_es&type=PROGRAM&Expires=1477798089&Signature=OoCPTkvdpAbdeDqKqVtQ26fkSVd75vpcefdxA2dew2dxZKc8uohFPSXsZcWRuCn4O86xqZMWIjazZQMhUJDDt6dmgrPLwTaVypjBjkadrRtuyKhkLFLgiLpzPMjf0Hpe2yLpLalglWA5TR0kvhNd1ZbaZ2HBAXSvyL6g-hSfvtI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_en&type=PROGRAM&Expires=1457545592&Signature=SJgy33XPQOXR7Ah-LEsnHPCVp5Iid~61nW~QJocS~ndU3ZQ4y0b6~E5Z2B8usRwv~dqvWzHpfYOJw9SuWSzpHTRix3ddLZJqRnfuW1-o8XJJ3ZV-uE5smFtfKtpXDbJktLcomdxS9IuX-De855IwF93tBc3wdQwZtTl33s0Fs3s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_en&type=PROGRAM&Expires=1479005032&Signature=YyIvxIGQuEty5tTtMH6MlLjB5YDsjH9xCnLVMqMGFY6Fg-c0Y0XA8Z1bdnedI4enqKGxyNMzlQQIHokKqufC0sj6WMQvMYuaHdE8fUl8PPR4EUp-y1dJq16gJHMGkEBel4h-VkdjZUW4jcyJRXnSxuwBe11T-e7ev8dHVVhkyJE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_en&type=PROGRAM&Expires=1451415224&Signature=Qq93i3~hb9PWjRwMTo5fNGhYRoNz4yTLIUsRxD4raAlKNrVLEMJjr5NxFrykixwSc5zyXP~xCz-J-LPsqVlCGkZnLMRKHcfC6mQCMouSluDhxvlGM95tqyM8AKwJyrSnU8cGBSCXFfrKtJggJFoiZ5KCL0slh-TPDq0Bp1zIFnk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_en&type=PROGRAM&Expires=1477272704&Signature=ShXx9Nc-K1jEICl-u7t01KbQSOKJFsVNmaXIaMblijbzPtmb~jnidguj5uKUnuh~tK9AyNdIWfXfD98BOkuh~Sxgu-wyIIp1I4ogUn7viMXVp7KduSsrFz29EvChFEX8dY5Toq1MbhZ5ixdCGLJOWnWXO7sYzM7AKkZ-2JdTDBk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_en&type=PROGRAM&Expires=1480475846&Signature=HRT4SS0u7xsQpdhKDcK1xPmR1jF~ydrYssh8jSWEUOck9nJJyjqCrGNqdGhYQpXtE8MKAU60abZC5lhJxCh3GCsnZeA~sVTZBx7XWUBIIn5ipRwgELfKrGAb0mZXeSdMbGtf3yHM6TN2ztQGmIrTbVNwSNMf0ezJESMR1DqprsY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_en&type=PROGRAM&Expires=1477850608&Signature=OVPN-uYUjgY3eaP0HHmlFgpKiFy1l~AMfkuhZP8IQB~K-6gYQUg4gMX4Py--Lc-IKFR5Dpexq67hKdvxSpiYLJKcmHPbJd5Dyrbbtvz8CmSW7aDmynptW6u6LXtnP~r-kt0zwMJKc9U-qdT8WecxCy2bwUASXbIdq0zbKUCvytA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_en&type=PROGRAM&Expires=1481619555&Signature=Re-ul7ZT2mgrHKIBH8LdXdPZ2QC~T2E6P096MXVM1fcOLKEGuCKMJ~Yxr7xkQTBbqHoEgDyTHgoy9pMEgfVM4KZVzPM2v5nJ4HEP~uT6GQXr4CK3-KSVe~yIHo3jsImPpgYd2dvwtkbDu1KhbWHKU3EiNm~Kzt1erNUbvZZUO~E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_es&type=PROGRAM&Expires=1465535538&Signature=aAxFPT2c2tCf-upnGhk--tvgmQ7UjtOjwVSMEDsh3oeRWy5KhDGKDyx8KSY64X9Gf9WKuXTBna~qyt2l4nwdaEoLyJ9iIlMHmJbYg5XJlON6609HG0YgDlMvNw1AR6ZzUDZXl3iGjByxqT60pEgJWPsfRvNDRK7Hd5PLKcWBv4c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_en&type=PROGRAM&Expires=1473025854&Signature=OTl9WbmB0NuB7Np0F~ZMvShgMVAktLwB5VTPITkSPjwZniPOUIExsTjQFTztpKDPUu-Ytl2n6NpDSb3DtQFlrk16bDt4zxyNmbQbWSxG5vXwgMq-fplair3wWmNf-8AuCLJMHZtQomEFL4Ql2n-hHfrpho3HxTG0km0hE7M2kI4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_es&type=PROGRAM&Expires=1469782864&Signature=TzWEUywsJHqDMYPtBwON5qgqPdLSz8mS9RI-nzGd35elZSP5zFd98fZ9~jyHs77UNVK4AXoSeKBFnQLxgInnb5WIherctcNVi2D2bc07ch8LhkYU36Xu6OVz2TjgjMnIcdKi5IVoh0vVNbNxQnOLOb1suoNf2TtxFQIS64xjBMg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_en&type=PROGRAM&Expires=1477751771&Signature=QLTmG6z5wZKIfmoSMwxZkQj3WBh0kbheBvmafklvUYSYNnQw6bHy36BinZA1cQ2~wkWrIZmEkSKqyEopigrNnD-YR4gu14~qFvcxD7nRTNOmbG5tUE82SnNpf3q9WQqrd9hsmw99A9Ki57ySoju~mYeU2sQNZlpIzCErpgG0KEI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_en&type=PROGRAM&Expires=1474395937&Signature=dZv-FncRf0rHcyNWGLzFQgsmUc0fg748FdZKykjBUsL7jkXB7uPii5wxrY5erVzl3KqN2klAxHXaiZ~ikQGjfysdjD9MhT4uK2leHopAxyKkWjy835nmouZ2bzAIhR0MF5GK04K9VbfN-Ym5PBmK~0vi6mgdPRjO88oFRpr6ewg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://download1212.mediafire.com/05gn2mbowojg/.../Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_en&type=PROGRAM&Expires=1470786752&Signature=CLPbnxhFpeN-D1xq~gfi9~kyupdAts5mMMBGghx5tKt4FQt3g2K8QamiOzUzHnCvJKgHQ83WPYYLOIkh7RCxeLhjxx0pbFlDu-TBoJSSRPM-ndL4mOlKZLOVqjCHKov4NUusCw~JK73QZ~95EYkqSKUSDTXeBjdc~yWT~B2u0RQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_es&type=PROGRAM&Expires=1472631553&Signature=OkbdcMUu3Wc-eUDfd4m2k6klYdQxSPemmb4kKQLSHWwVmtpzpipzIJrH7K4J0MT5wJ4zSGXtqQgeoAjI3z9Y4EHuwRnlZehMf7V3G8ruubFhuZVEDK-9gLGNE21oauHyjlzxqVG6nOhrMwNtZ2ESI7l7KfOx3uChDIK1MCdcZWA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_es&type=PROGRAM&Expires=1465896651&Signature=AUAI2zD~S84JjvoBE8R97UUuvWH9sAVHNHbWViNB7p-V3CeCmVYucR2xxQw5XSikaFryHHxUtTTlARrDSwbmAzwPktRZzjRkrEiS8Wqbdv5x7-wuIORi86YLGflQcRIUdZAFrSOxZR1goohBoTDAz-oF5wsqIWdq2cgxl1eMR5k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_es&type=PROGRAM&Expires=1469687554&Signature=P9zpSTP-ZKZ77R379R-UL3ZhGLq02zTpZOJLIlIQkB5isZdq8KIr-xWH83k-Zn-Io0cAXyNazq8Ulq-D7hIkfuK0AqGs0rFo9jUfRYOnbPda9K846PMGyIbnEUum3yu~LB-G0VTldwyo3iQAt8gFmA-cq6oNHOV1fz3lCYStcB4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

http://gsf-cf.softonic.com/4ac/747/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28009&instance=softonic_es&type=PROGRAM&Expires=1445867240&Signature=OWPzLixdpaWbcDGYuIfWdSzv6Lm44Muic7bhW4RPUpf0whavOA1F3xxwaMPRFiJERBZl0tT1iPEihJ2STWsrsJ4lWlSSiitAmaN48SsT77ZkJOOknxX6PT~ZdL5ZwaOSElcPfffPtmobAnvsFl08zgSqjn4WDhyy7xSNL7C9aiE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Rainmeter-2-5.exe

Latest 30 of 65 download URLs

Scan Rainmeter-2.5.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.