home

installhelper.exe

ShenZhen Enode Techology co,.Ltd

The application installhelper.exe by ShenZhen Enode Techology co,.Ltd has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is the uninstaller utility registered in the Windows Control Panel for the program The Desktop Weather 2.0 by ShenZhen Enode Techology co,.Ltd.
Publisher:
ShenZhen Enode Techology co,.Ltd  (signed and verified)

MD5:
5cad690520df4059068bd7cde5137de9

SHA-1:
433d10eec3cb1c9e454e4051b5b24d11b62838ac

SHA-256:
4224f6d8cfb2531181eaf89fa642663fa0a821aee3040d363ba1340413b4d2e9

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/25/2024 6:44:31 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.TheDesktopWeatherService (L)
17.3.16.3

File size:
868.9 KB (889,800 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\weathertool\2.0.0.11031\installhelper.exe

Digital Signature
Signed by:
ShenZhen Enode Techology co,.Ltd

Authority:
VeriSign, Inc.

Valid from:
2/9/2015 7:00:00 AM

Valid to:
2/10/2016 6:59:59 AM

Subject:
CN="ShenZhen Enode Techology co,.Ltd", OU=Security, O="ShenZhen Enode Techology co,.Ltd", L=ShenZhen, S=Guangdong, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
33B6F565ED7052F8A3936B7D48C82056

File PE Metadata
Compilation timestamp:
11/16/2015 9:18:11 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x819E3

Entry point:
E8, E4, 32, 01, 00, E9, 79, FE, FF, FF, FF, 35, 2C, 4E, 4D, 00, E8, A4, 85, 00, 00, 59, 85, C0, 74, 02, FF, D0, 6A, 19, E8, 7C, 7F, 00, 00, 6A, 01, 6A, 00, E8, 4A, 1F, 00, 00, 83, C4, 0C, E9, 2B, 1E, 00, 00, 8B, FF, 55, 8B, EC, 56, FF, 35, 2C, 4E, 4D, 00, E8, 74, 85, 00, 00, FF, 75, 08, 8B, F0, E8, EF, 84, 00, 00, 59, 59, A3, 2C, 4E, 4D, 00, 8B, C6, 5E, 5D, C3, FF, 35, 2C, 4E, 4D, 00, E8, 53, 85, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 33, C0, 39, 45, 0C, 76, 11, 8B, 4D, 08, 66, 83, 39, 00, 74, 08, 40, 41, 41...
 
[+]

Entropy:
6.4908

Code size:
718 KB (735,232 bytes)

Program Uninstaller
Program name:
The Desktop Weather 2.0

Display publisher:
ShenZhen Enode Techology co,.Ltd

Display version:
2.0.0.11031

Uninstall string:
C:\Program Files\WeatherTool\2.0.0.11031\InstallHelper.exe -Uninstall English


Remove installhelper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.