home

wwl7077.exe

Weather Watcher Live

Singer's Creations

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Singer's Creations   (signed by Singer's Creations)

Product:
Weather Watcher Live

Description:
Weather Watcher Live Setup

MD5:
6058b9e5bc9c213cb48631463e280996

SHA-1:
815e8cd445ffb5fd4cc0d27ee2ed96f1ff01a8d1

SHA-256:
ceb8345aa5f2035f49b226b377da53e38b0c8406ee396f5179dc354621376250

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/23/2024 1:44:08 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant)
8.9306

File size:
7.1 MB (7,485,736 bytes)

Copyright:
Copyright © 2011 Mike Singer

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Digital Signature
Signed by:
Singer's Creations

Authority:
The USERTRUST Network

Valid from:
7/19/2010 2:00:00 AM

Valid to:
7/20/2011 1:59:59 AM

Subject:
CN=Singer's Creations, O=Singer's Creations, STREET=PO Box 126611, L=Harrisburg, S=PA, PostalCode=17112, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00D3DF456A6F3566171A7825A0F5837127

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:RttV55dnnt11OLqOmGkxSeP27OESlObFmcD:RN9n71OLqHGMN4OEiqmcD

Entry address:
0x9A58

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 6E, 96, FF, FF, E8, 75, A8, FF, FF, E8, A0, CA, FF, FF, E8, E7, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 0B, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D4, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, AC, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 1F, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file wwl7077.exe has been seen being distributed by the following 11 URLs.

http://gsf-cf.softonic.com/815/e8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21450&instance=softonic_pl&type=PROGRAM&Expires=1461950350&Signature=Hsn-WMna0EvxrsYWmvla4XAa23Gmwb1rAO0eaLqDB~Job-0hYfs8OxHFfNtMUEPCkV7IAnyDg4tuTCXk0D9rU3FKebDsutyVWmIjY49FHyZ2q-z6xEX6FILDcFIutpyc7LAvmlkXZX9ayGfN31cw1FmV-zNvxR7k~PRBBZ7~7OY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WWL7077.exe

http://gsf-cf.softonic.com/815/e8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21450&instance=softonic_es&type=PROGRAM&Expires=1478657632&Signature=fX9KaY0gPtLN1hJWhLX4GiNIydQWPm4nMP2DDSdNPbql9RdHeiwd6WBlg6ezxJ8lYD4LEg1A8Cfi8c78tsU8hDoRWYa~dDe0n~cgOvpZ69TvnoqRFgxrO74LIDBZpQLq92P0qnjImLIWLvN9qnyAelvDpXvge9dqJBDbTy3tF40_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WWL7077.exe

http://gsf-cf.softonic.com/815/e8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21450&instance=softonic_es&type=PROGRAM&Expires=1476528353&Signature=fDZe9~gd447ZtgqU86b1d1K4jOR83yz9usTyOTPVPxGApt-HSSl3aixi37g0Njir4QUOxqjobDqIAApMP~NbSWJgE2mySvlO7Axj1-SpPhRhJiWHRed5gzTgV5xseKVYrCaka0O~zi~872X~AT~4FQDlXp2Ofsk~CevZAJpTVKs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WWL7077.exe

http://gsf-cf.softonic.com/815/e8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21450&instance=softonic_pl&type=PROGRAM&Expires=1470855317&Signature=X5wYSCjBnTpk7NUsGi2dai81tinqbcrusoq5nNflxYPs6SIAvqrqRE4KTCD5WsRoOrxR7nJtnngwfpalkuqhwqbgyXTI4uVsqkHjfXskdiy~5DQ8NfS-LnIg4Qc1KYrc4IQXi2lFROrxgAnkkp5cXgP-qhk5kWt5vgek0Mn56kc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WWL7077.exe

https://app.box.com/index.php?rm=box_download_shared_file&shared_name=6i1ila4a41&file_id=f_683380485

http://gsf-cf.softonic.com/815/e8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21450&instance=softonic_es&type=PROGRAM&Expires=1466890867&Signature=WrgvL3EeMxLNd6NDSSEQsWOexYg3RFZPD5hse7cHumPlcibDshYBrtdcavHeO13w9NhBrbSUMyC7FCxmuNHZwlQkdWa0Wzy58ENxOGCBE~uzsJvpeOf7W5WhLsTPdqhDu4IogVRY~m76xSq-Zx1mLX8zGy40LATronXoAdEnRi8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WWL7077.exe

http://gsf-cf.softonic.com/815/e8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21450&instance=softonic_es&type=PROGRAM&Expires=1455514280&Signature=VNtNiYjDOincG8uhliMTnB7J0NM4WDzNL6~07heAqyJCnjEeTRDyNpCfXIYo0gOrm4tazK3j7T-bD7Tj02hYxEGM1YK0GnglVFIh9oTyjaXY9kyKPD4nxq2v0X-cyskE7jyA90Nxag6KWBVaeuiz4kpflPWHI~0F~QaYa1Aw6Tc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WWL7077.exe

http://gsf-cf.softonic.com/815/e8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21450&instance=softonic_es&type=PROGRAM&Expires=1444061137&Signature=Za4BDKlZwyLTolUD-t0J3EiJEmB~o6m337uTMP2Bofzu54VvcDjJ-2TlPBjbqkWr3rclBKyFG7ecY606ewUqwJjAblgzpFEztNCuqnozDgX1lTOCtz-qy2V2mzh9UdVq1jXrudHdhCQ4hH58fU9PH4U~DJ69zO0cwCdqZrCueAM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WWL7077.exe

http://gsf-cf.softonic.com/815/e8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21450&instance=softonic_es&type=PROGRAM&Expires=1455867367&Signature=GCqS2lsgPuhrTZO5qPEXC4x99L74891Lj-iP6Y8Gfnl6MPIbRJ1un7TwmAIrjyAyK6MSdTsYhf~F9Oq~RmgzSHP4PDY4mPWSKZoD9PhvABGgVEpMpKQerplJcbr~DY8FV~q4wC1L03AN5aabS0-AnIHVQl-xxBBuy0fIzreHatU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WWL7077.exe

http://gsf-cf.softonic.com/815/e8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21450&instance=softonic_es&type=PROGRAM&Expires=1445856538&Signature=B8cY9XtuUVGCELkcCjwVM4obAo9wnOMKf08EwyMRPt1JdwtWmlj5mSuhrhmQc34Jo3aM6NnAZd8k6jN53aM2WKDoT6eklBa-pD~xgMAZoGlru9Xnilhe1ymfhynl-NvWYbICoeP6AwbdCK8vyumzg-eL6VaDG2zRRrdqwWTep6M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WWL7077.exe

https://dl.boxcloud.com/d/.../Roqwj3v2ZRAO_0Kn18J5_HGAjZAUJmUVzMkPAfr4rowCDdjlV_dumc3nCR846kvqz5gAk61vf3URgf_VTEZJ31S2y0KUs5-3cHUFbBwA0J0PB79q9qZYwgCto7pwhduMbASZnMxQWuzw2JUxBx7slgdoNiaa3WklFw7xkb9o_OhUnkUiBC7o7zkUlE22My2pnIIsN-maw0GYwM-DY3o7lbJCRsHhoGtLU6k_Y-lCX-Axmucfa4VJkmLwXnPWIoSXD2EUt0V9Ty0ATjdfOBor-F_pLitGyfsfE_muXkQJqaVf6VKUT5t70--WJSUYHTq2ry-lOAkkW1eF4wHIl2k4ZstTLWCkST7iMBh-ozqaXRRwhIOIZDKRTCmsIMMpqGT7X-OlI1I0CZP-A8DifHC9ROhiKSLDxnct-RcS7KfXLdrn51U-awxald6JUCh4R2V7PITxZNo5h5FYcjDDWE_3L5P-x1W_7r0q3B4c_92GPNJR_P4xcCu3RXRlJq9UXWH4OMR2G48y9FxITbAodZeWLVM-YGrjprckxO4vpmr48mbigep85url6lDukJeNeXEmsT2rsBOdlZR65pDxZFeasYdiu-KAqkusaDxK0R0uevTKOjjwI9vZ4vhFKgGsFp21aMgVCjRFTtZUMJ57FVm6snIEwabI5dKGazW1NK1eEBzlmEkk6qB0QMPns94S1E_4Z1bK82Z3iu8_VAHrlUy8LCH7CoYqAZibnbZ3aA9QWPrdtvw-pUlTGmeNhmKnK0LdOq8r6YkhRE1Pqw7WmMzkbF4U1v965Z_chHJr4SmJqC3plKzyjrr9dW7igk72C_sZt3iwhgk-PTXQi1OaiQ179dHrRikUw-bUTNL7aoJsMfQ9g9H5rvQ1m0tdNd17BvShxh4rjhT-6gKGNM60vUrOgPtj-A9LwU8-J5yzwsixWguyCFBRFeIsmm6lduw0_6efZXlI0UUyYx7l

Scan wwl7077.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.