home

WeatherApp1.0.0.0.aiui

WeatherApp

JH Software Private Limited

The file WeatherApp1.0.0.0.aiui, “This installer database contains the logic and data required to install WeatherApp.” by JH Software Private Limited has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Portable WeatherApp  (signed by JH Software Private Limited)

Product:
WeatherApp

Description:
This installer database contains the logic and data required to install WeatherApp.

Version:
1.0.0.0

MD5:
a4c967b754310d6733ce7a98d632dc32

SHA-1:
d7f819763e09967aa22f36ade1006b45a75e3c58

SHA-256:
ef2d5a3540715599fa92a16604009089582a13f0d4e69144d85d7ee277775752

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
12/23/2024 4:11:11 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.JHSoftwarePrivate.Installer (M)
15.12.19.19

File size:
1.7 MB (1,778,240 bytes)

Product version:
1.0.0.0

Copyright:
Copyright (C) 2014 Portable WeatherApp

Original file name:
WeatherApp1.0.0.0.aiui

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\portable weatherapp\weatherapp 1.0.0.0\install\032efbb\weatherapp1.0.0.0.aiui

Digital Signature
Signed by:
JH Software Private Limited

Authority:
Thawte, Inc.

Valid from:
7/27/2014 7:00:00 PM

Valid to:
7/19/2015 6:59:59 PM

Subject:
CN=JH Software Private Limited, OU=IT, O=JH Software Private Limited, L=New Delhi, S=Delhi, C=IN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1EB0D774DCDE92063F522689F4040A38

File PE Metadata
Compilation timestamp:
7/30/2014 3:40:34 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:RqKMgb64eiw+QMX4QSZbdRKBwHm+cesBpu3TXT3m0Tq:RqKMgb6ViwLMXubyB1esbu4

Entry address:
0xC875C

Entry point:
E8, 47, CC, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, F0, 33, DB, 3B, F3, 75, 1E, E8, 5D, 4E, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, C5, D5, FF, FF, 83, C4, 14, 8B, C6, E9, C2, 00, 00, 00, 57, 39, 5D, 0C, 77, 1E, E8, 39, 4E, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, A1, D5, FF, FF, 83, C4, 14, 8B, C6, E9, 9D, 00, 00, 00, 33, C0, 39, 5D, 14, 66, 89, 06, 0F, 95, C0, 40, 39, 45, 0C, 77, 09, E8, 0A, 4E, 00, 00, 6A, 22, EB, CF, 8B, 45, 10, 83, C0, FE, 83, F8, 22, 77...
 
[+]

Entropy:
6.6042

Code size:
1021.5 KB (1,046,016 bytes)

Remove WeatherApp1.0.0.0.aiui - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.