home

windoweather0.exe

Fried Chicken Interactive

The application windoweather0.exe by Fried Chicken Interactive has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Fried Chicken Interactive  (signed and verified)

Product:
Fried Chicken Interactive

Version:
57.3.5.6664

MD5:
a2fab6805b4eab050e4660eb63ac2a8c

SHA-1:
1622e4801470d43e2c91d662934f72ee3751194a

SHA-256:
edbb52b687a8f621243d71c396447e585f1c38f935f698c92f0c1105d0747478

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/15/2024 4:48:19 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.DownloadAdmin.FriedChi.Installer.Meta (M)
16.5.25.22

File size:
894 KB (915,496 bytes)

Product version:
57.3.5.6664

Copyright:
Copyright (C) 2015

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\windoweather0.exe

Digital Signature
Signed by:
Fried Chicken Interactive

Authority:
GoDaddy.com, Inc.

Valid from:
3/8/2016 11:13:39 PM

Valid to:
3/8/2017 11:13:39 PM

Subject:
CN=Fried Chicken Interactive, O=Fried Chicken Interactive, L=San Francisco, S=California, C=US

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
1E418FCF3E719CC2

File PE Metadata
Compilation timestamp:
4/23/2015 4:06:28 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:acJIKEUlX4peA4klTx1NK/BjdANnMKtcSZa67hXy8:gKdipeAVlTx1exdItcSBXy8

Entry address:
0x3FCB

Entry point:
E8, 90, A3, 00, 00, E9, B0, 9B, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, FF, 25, C0, 17, 4C, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, FF, 25, EC, 17, 4C, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, FF, 25, C0, 10, 4C, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, FF, 25, 84, 10, 4C, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, FF, 25, 6C, 18, 4C, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, FF, 25, 30, 18, 4C, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 81, EC, 18, 02, 00, 00, 53, 8B, 9C, 24, 20...
 
[+]

Code size:
56.5 KB (57,856 bytes)

Remove windoweather0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.