home

WomanCalendar.exe

Women's Advanced Calendar

SoftOrbits

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Women's Advanced Calendar’.
Publisher:
SoftOrbits  (signed and verified)

Product:
Women's Advanced Calendar

Version:
4, 3, 0, 0

MD5:
999b2729e3223d231e23a5b992dd90f4

SHA-1:
d5c4bd65fe00a9e96df97a2e757192b221606323

SHA-256:
df3eb86035daca720ba89596150ff9a31fb79e10a136263544e49f5d063c7669

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 5:51:59 PM UTC  (today)

File size:
5.4 MB (5,678,368 bytes)

Product version:
4, 3, 0, 0

Copyright:
Copyright (C) 2012

Original file name:
WomanCalendar.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\advanced woman calendar\womancalendar.exe

Digital Signature
Signed by:
SoftOrbits

Authority:
VeriSign, Inc.

Valid from:
1/22/2012 12:00:00 AM

Valid to:
2/20/2013 11:59:59 PM

Subject:
CN=SoftOrbits, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SoftOrbits, L=Smolensk, S=Smolenskaya, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
144C975B08011FAB22336FED3C9470FA

File PE Metadata
Compilation timestamp:
2/13/2013 1:26:29 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:yNopIhpvzA4iVYrkqX07JeuVSYqHx+o126GQrScrQfWo2U2O0znufNPgNpsV:6opIhpQkkqrZYAwoM6GQraO42VnDy

Entry address:
0x7C90A9

Entry point:
E8, F4, 6D, 10, 00, 96, A8, F6, 11, CF, D8, 86, ED, 89, 5C, C8, 7D, 8E, CB, A7, 91, 0F, 2C, 4A, 8B, 79, 26, 84, B9, B5, 0B, 19, DE, 1C, 75, 41, F7, 85, EA, A8, B9, E5, F3, 3F, C1, 0F, 74, D2, 40, A7, C2, F0, F9, 16, 32, A2, CB, 89, 27, 8C, C4, 0F, 97, 5D, E9, 22, 84, F2, 57, 41, 4F, B6, B1, CB, A8, 94, C2, 00, 9C, 68, C7, B5, 4E, C8, 14, E0, FF, 01, ED, 00, DA, ED, CC, C9, FA, E8, 96, E7, 64, 8E, C8, F5, 02, C8, 35, 34, 12, F8, A7, 50, 0C, CE, D0, 1E, B5, F9, 76, 62, 7A, 80, 91, 8D, 33, 71, DD, A9, B6, 33...
 
[+]

Code size:
1.5 MB (1,530,880 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Women's Advanced Calendar

Command:
"C:\Program Files\advanced woman calendar\womancalendar.exe" -m


Scan WomanCalendar.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.