» stormwarningsapp.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

stormwarningsapp.exe

Storm Warnings

The application stormwarningsapp.exe by Storm Warnings has been detected as a potentially unwanted program by 3 anti-malware scanners. It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘StormWarnings’. This file is typically installed with the program StormWarnings by Local Weather LLC which is a potentially unwanted software program.

File name:

Publisher:

Storm Warnings (signed and verified)

Version:

1.1.0.22

MD5:

b9c9482f51dae6867e7df1ec0ba80f45

SHA-1:

99245990344672b62e1db06661ffd0db5b53a366

SHA-256:

db5da1c2981e0dbc613f8e37c77eaea2cc7ff9db6c45a9e289d1b7059289e964

Scanner detections:

3 / 68

Status:

Potentially unwanted

Analysis date:

11/27/2024 4:21:20 AM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

ADWARE/Adware.Gen7

8.3.1.6

ESET NOD32

Win32/Verti.K potentially unwanted (variant)

9.11975

Reason Heuristics

PUP.Injekt.StormWarnings (M)

15.12.15.1

File size:

1.7 MB (1,733,296 bytes)

Product version:

1.1.0.22

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\stormwarnings\stormwarningsapp.exe

Digital Signature

Signed by:

Storm Warnings

Authority:

thawte, Inc.

Valid from:

4/16/2015 5:00:00 PM

Valid to:

4/16/2016 4:59:59 PM

Subject:

CN=Storm Warnings, O=Storm Warnings, L=Austin, S=Texas, C=US

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

620D61D6D56A0B5C1E10B099EE1892F1

File PE Metadata

Compilation timestamp:

7/20/2015 1:26:01 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

24576:EwLSkCT+5DXQqzMnhAN5yqNg79AlXoPpU9K:EuSkCT+5sMMnM929PiK

Entry address:

0x57CE3

Entry point:

E8, 86, C2, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A1, 88, 34, 56, 00, 33, C5, 89, 45, FC, 83, 7D, 08, FF, 57, 74, 09, FF, 75, 08, E8, BF, 98, 00, 00, 59, 83, A5, E0, FC, FF, FF, 00, 6A, 4C, 8D, 85, E4, FC, FF, FF, 6A, 00, 50, E8, 49, B3, FF, FF, 8D, 85, E0, FC, FF, FF, 89, 85, D8, FC, FF, FF, 8D, 85, 30, FD, FF, FF, 83, C4, 0C, 89, 85, DC, FC, FF, FF, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF, FF, 89, 9D, D4, FD, FF, FF, 89, B5, D0, FD, FF, FF, 89, BD, CC... 
[+]

Entropy:

5.9232

Code size:

1.1 MB (1,104,384 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

StormWarnings

Command:

"C:\Program Files\stormwarnings\stormwarningsapp.exe"

The file stormwarningsapp.exe has been discovered within the following program.

StormWarnings by Local Weather LLC

76% remove it

Remove stormwarningsapp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.