» stormwarningsapp.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

stormwarningsapp.exe

Storm Warnings

The application stormwarningsapp.exe by Storm Warnings has been detected as a potentially unwanted program by 3 anti-malware scanners. It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘StormWarnings’. This file is typically installed with the program StormWarnings by Local Weather LLC which is a potentially unwanted software program.

File name:

Publisher:

Storm Warnings (signed and verified)

Version:

1.0.2.93

MD5:

1c1cc93e9f0f67b2901f281ed84413f3

SHA-1:

1da16594b1ff9461c4c80da60dc70fd919ecd1b3

SHA-256:

a06356c2930eb0009b41cad9d6c56826354e69ec5b7c6f6072213664549f461a

Scanner detections:

3 / 68

Status:

Potentially unwanted

Analysis date:

11/27/2024 4:56:21 AM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

ADWARE/Adware.Gen7

8.3.1.6

ESET NOD32

Win32/Verti.K potentially unwanted (variant)

9.11741

Sophos

Verti

4.98

File size:

1.6 MB (1,713,328 bytes)

Product version:

1.0.2.93

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\stormwarnings\stormwarningsapp.exe

Digital Signature

Signed by:

Storm Warnings

Authority:

thawte, Inc.

Valid from:

4/16/2015 5:00:00 PM

Valid to:

4/16/2016 4:59:59 PM

Subject:

CN=Storm Warnings, O=Storm Warnings, L=Austin, S=Texas, C=US

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

620D61D6D56A0B5C1E10B099EE1892F1

File PE Metadata

Compilation timestamp:

6/4/2015 11:43:02 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

12288:/pkXxSduugjrBhNaeILoxx91dwHkMfkVV6h9pj/z7irTi4nrToDEjH8fcVisMVSe:ihCGwoZUkMf+V65LcVikAGOSLVH5jO

Entry address:

0x57923

Entry point:

E8, F5, C2, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A1, 48, F4, 55, 00, 33, C5, 89, 45, FC, 83, 7D, 08, FF, 57, 74, 09, FF, 75, 08, E8, 2F, 99, 00, 00, 59, 83, A5, E0, FC, FF, FF, 00, 6A, 4C, 8D, 85, E4, FC, FF, FF, 6A, 00, 50, E8, 49, B3, FF, FF, 8D, 85, E0, FC, FF, FF, 89, 85, D8, FC, FF, FF, 8D, 85, 30, FD, FF, FF, 83, C4, 0C, 89, 85, DC, FC, FF, FF, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF, FF, 89, 9D, D4, FD, FF, FF, 89, B5, D0, FD, FF, FF, 89, BD, CC... 
[+]

Entropy:

5.9211

Code size:

1 MB (1,091,584 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

StormWarnings

Command:

"C:\Program Files\stormwarnings\stormwarningsapp.exe"

The file stormwarningsapp.exe has been discovered within the following program.

StormWarnings by Local Weather LLC

76% remove it

Remove stormwarningsapp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.