home

SevereWeatherAlertsApp.exe

SevereWeatherAlertsApp

Weather Notifications LLC

Part of an adware web browser extension that delivers advertisements such as coupons, price-comparisons, display media, affiliate links, banners, popups/popunders and other links. The application SevereWeatherAlertsApp.exe by Weather Notifications has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Severe Weather Alerts by Weather Notifications, LLC which is a potentially unwanted software program.
Publisher:
Weather Notifications LLC  (signed and verified)

Product:
SevereWeatherAlertsApp

Version:
1.0.9.0

MD5:
5dad6355a4e6272cb3dc132f2618a1d1

SHA-1:
a994448928e97b7585c43967da4a18f8a802757f

SHA-256:
6c876a1878736cdce407e1c82fd8f055d0db0b240a0f1c31d7fca77470aaac89

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
12/23/2024 11:49:37 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Weather.WeatherNotifications (M)
16.1.29.15

File size:
340.2 KB (348,384 bytes)

Product version:
1.0.9.0

Original file name:
SevereWeatherAlertsApp.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\severeweatheralerts\severeweatheralertsapp.exe

Digital Signature
Signed by:
Weather Notifications LLC

Authority:
COMODO CA Limited

Valid from:
6/13/2013 6:00:00 PM

Valid to:
6/14/2014 5:59:59 PM

Subject:
CN=Weather Notifications LLC, O=Weather Notifications LLC, STREET=250 Park Ave Ste 504, L=Minneapolis, S=MN, PostalCode=55415, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0D57C9460FE0C441B8FDD693F1AC6CD7

File PE Metadata
Compilation timestamp:
7/8/2013 5:24:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:fnOkOjKPb5VCblZrpO2NmtYalc1KUdIVZ2Q84Xp4XPmp:fnTOW5VCblZYUKqaFvp4XPmp

Entry address:
0x53AFD

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.9230

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
327 KB (334,848 bytes)

The file SevereWeatherAlertsApp.exe has been discovered within the following programs.

Severe Weather Alerts  by Weather Notifications, LLC
Some versions of the Weather Notifications software bundles various potentially unwanted software such as toolbar and web browser extensions using the Tuguu DomalQ download manager.
www.severeweatheralerts.net
87% remove it
 
Powered by Should I Remove It?

Remove SevereWeatherAlertsApp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.