home

forecast.exe

5-Day Forecast

Publisher:
5-Day Forecast

Product:
5-Day Forecast

Version:
1.0.0.0

MD5:
1d2982d1e58d0381b65d96e5525b8a05

SHA-1:
03616d1057d164d5bc123b128ce9be59ceb934a9

SHA-256:
a518782b045fe5f54a5817ce5024b346c00c7cf21148539c24abfa0d8d3e7fc9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 3:39:44 PM UTC  (today)

File size:
3.6 MB (3,809,280 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2009

Trademarks:
5-Day Forecast

Original file name:
Installer.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\forecast.exe

File PE Metadata
Compilation timestamp:
6/14/2010 11:31:26 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
98304:vE9f4YEhzXYcCTFInf4YEhzXYcCTFIDE:vEsYfIWYfIDE

Entry address:
0x3A0E4E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.5836

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
3.6 MB (3,796,992 bytes)

The file forecast.exe has been seen being distributed by the following 3 URLs.

https://dl.boxcloud.com/bc/4/.../NDgJUQA0bP-RFpH6grme2w9EmoLKR8WY3uFAS5iUUeYUX50v5dSQ4-Nr2uJWSJLaFgIO-ts53tm8JABWcujShQXvzg4VgRI3Up1vS6sggW8xtBgidndiurX-eAQI8944a7nXeQfxGxZL72lPynoz02lABXh7ytAmfIoiXHoFWbiup69foBG2kondO9DgIo5bG-oMS_2T2V0HJK1PPyBjhOpl7lBj9QcAVm8jgAu_1E6LK7pqgOFVEo9854ADhphdQZ2W-R20tkPlEKR1d93X3NhPu3nhrordHYVM9IBAKkv5Czq2-sT-8WO1QG5NTTVMsue4gYF68TZaDAM-usk5kf9lMuS-QsyJiXNiOXpkxBkkRwQqKk-HYio9X3ijClmW0ufr-lKWpOVQDx9_GJ84PmwjyPwknYX0ToNL963OQpCalPhIcLWdI7RL1Jwu97COvxB_vsmgxVg0LCuRjGFWKqTFn0AaxbUcwkZM8KJc1DnSICp_VV5dvEGmCUPSKEw465R2fCUEsd-HbUCMg_Jtpe7bnHI2pLYMxPpkTcZLRsW4oLzaq2eyJR9koy_J0bTAJZC15KPw66T6D4rYe0yXVhDcPK8-CG5eBdTH5I4T7RhDofACNnwpRZomRk6eJ_aGO5IeCsjQ7BS0gXSNQ4HbGIv0qLqhQTML3Ph_EgVUJxDmu3-n5OKYdzSEHLLwkdR097bRDqgI--vmNaObJPgMvKx3XqphZUrM0OJfyEs7zCNDLr31zVLYdv1mvTnMQlrGLzaTQAMMkI7JrmaiItrO5K09cwfLDBLVSdymBY1HDNT77VGAcq1XeR2n5GbU5TTQnNoF_u_XqGSZgdu2kt9mWQGK9WSfcoHyqgJAjyYsWnu6uiefANySDT7ZKix16wK1Cy5QHNnj9gzEOvZLqW440cO5qGFOVBkuT-grwqWudl

http://www.box.com/shared/.../l75yla9y85.exe

https://dl.boxcloud.com/d/.../lyTpMlgUsmcSDtvWCcr1DmV9nGNwc0zwwjPs1_6uImUIipLxNK5nspSZ7KVgGNeV-2R-pRnEDAAa0Qj7kslrf97gfZo0bHsPjcmXiRSc0oVd9sK5SAUGFFl3LXmNth-2mSTeoQz9Ym3M0YIg8f1QmtY6A_1_sds3ZosxeaW8JhgCmAoBV3wnCCppHirmbmztS-p1kybsPJe-qp_HEQKS8EqOMDo_OMdQcRDXtu9MKyOsWX12ksgOWEq4Vm4DVUcnIR973uMMG5DFmRaI0x_to8B6o1dNJZCZEyF8vUvYyFnpffXrYkSX7GsOKcRPaWajGnPpstX1rgJUNlFpEurwZunmW47IFdOjXCVT-TU5HInlqOKbd9A4DKX50w3NWA2UN72KRu80vSJqSW2onxIcQGU_3QD2ZXRMcQPjBrJra928awwXG6DoN0h48ekOZ0c802dQ2QU9WL-0A3RT4pyo-f3_JEgdpCw-YxVaW3uH6_KnUTexWaaHdaoG3t7izk_A3NNHcPDFv8DUbiRfKWfZqTT8Y21iimcpMh_IZN0XcrxPdf_zSM1a4h_ULqgXUpt5xvT_fqTHNiu4AUoG9_IpPLG54bsKbMfOiMaEBCA09ClWCfn3xWaQVdho88v4OubVIuylEkFzHbcmdtTgs9gGSPD2qHssM_HsemGbuofNNs3kvWmA-szY2rVngGYAqeS2bcvGpoWYclq7RPQLvPvn0RjfMWvOfifPUcfypeVckzPgHhLXxnEUYanHcsS0QC-dQAukGrOWb-8AaLJiDthXVPHwpJcQlMjx3iDr1_iIZEmXIJ3Mqx5nisy2Ij9PUXduEipIvr283CCouDg9522wwf68AR5gvoZ9KSECF6pHQ9GuwaG8E4Y0jKfqTfnR9lU5GW5K4Ri9br87itn1UFRWy8HRTAK3x-6xie8yim3YZ0Ap5kwBs2eBUg8hCWNgOFs_iW3NUub9aVzs

Scan forecast.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.