| File name: | WZSetup.exe |
| Full analysis: | https://app.any.run/tasks/73fe10a9-7c2c-4bb2-a245-a3e29d15a396 |
| Verdict: | Malicious activity |
| Analysis date: | November 04, 2024, 04:09:32 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Tags: | |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections |
| MD5: | 3C17F28CC001F6652377D3B5DEEC10F0 |
| SHA1: | EEB13CF47836FF0A0D5CC380618F33E7818F9D75 |
| SHA256: | FA352552306B80F3F897F8F21D8579AE642C97D12298E113AE1ADC03902C69B8 |
| SSDEEP: | 98304:O/KXgWUBu+NlRk9OfK2GTyYX+eyaB135PSuXTm0LuM74eL3o1+ykb5io5dtWx9eJ:O/KXNs6OfxGTyHwnXZB3o1jkb5ioPtE2 |
MALICIOUS
Starts Visual C# compiler
- WeatherZero.exe (PID: 1788)
SUSPICIOUS
Creates a software uninstall entry
- WZSetup.exe (PID: 612)
Reads security settings of Internet Explorer
- WZSetup.exe (PID: 612)
Executable content was dropped or overwritten
- WZSetup.exe (PID: 612)
- csc.exe (PID: 7240)
Checks Windows Trust Settings
- WZSetup.exe (PID: 612)
The process creates files with name similar to system file names
- WZSetup.exe (PID: 612)
Malware-specific behavior (creating "System.dll" in Temp)
- WZSetup.exe (PID: 612)
Uses .NET C# to load dll
- WeatherZero.exe (PID: 1788)
Executes as Windows Service
- PresentationFontCache.exe (PID: 7364)
- WeatherZeroService.exe (PID: 3792)
Checks for external IP
- svchost.exe (PID: 2172)
- WeatherZero.exe (PID: 1788)
INFO
Create files in a temporary directory
- WZSetup.exe (PID: 612)
Reads the computer name
- WeatherZeroService.exe (PID: 3792)
- WZSetup.exe (PID: 612)
- WeatherZeroService.exe (PID: 6228)
- WeatherZeroService.exe (PID: 5852)
Checks supported languages
- WeatherZeroService.exe (PID: 5852)
- WeatherZeroService.exe (PID: 3792)
- WZSetup.exe (PID: 612)
- WeatherZeroService.exe (PID: 6228)
Reads the machine GUID from the registry
- WeatherZeroService.exe (PID: 5852)
- WZSetup.exe (PID: 612)
- WeatherZeroService.exe (PID: 3792)
Checks proxy server information
- WZSetup.exe (PID: 612)
Creates files in the program directory
- WZSetup.exe (PID: 612)
Reads the software policy settings
- WZSetup.exe (PID: 612)
Creates files or folders in the user directory
- WZSetup.exe (PID: 612)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable MS Visual C++ (generic) (42.2) |
|---|---|---|
| .exe | | | Win64 Executable (generic) (37.3) |
| .dll | | | Win32 Dynamic Link Library (generic) (8.8) |
| .exe | | | Win32 Executable (generic) (6) |
| .exe | | | Generic Win/DOS Executable (2.7) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2021:09:25 21:57:16+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 26112 |
| InitializedDataSize: | 162816 |
| UninitializedDataSize: | 1024 |
| EntryPoint: | 0x33b3 |
| OSVersion: | 4 |
| ImageVersion: | 6 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.9 |
| ProductVersionNumber: | 1.0.0.9 |
| FileFlagsMask: | 0x0000 |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | English (U.S.) |
| CharacterSet: | Windows, Latin1 |
| CompanyName: | Weather Zero |
| FileDescription: | WeatherZero |
| FileVersion: | 1.0.0.9 |
| LegalCopyright: | Copyright Weather Zero 2022 |
| ProductName: | WeatherZero |
Total processes
147
Monitored processes
13
Malicious processes
1
Suspicious processes
2
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 612 | "C:\Users\admin\Desktop\WZSetup.exe" | C:\Users\admin\Desktop\WZSetup.exe | explorer.exe | ||||||||||||
User: admin Company: Weather Zero Integrity Level: HIGH Description: WeatherZero Exit code: 0 Version: 1.0.0.9 Modules
| |||||||||||||||
| 616 | \??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1 | C:\Windows\System32\conhost.exe | — | WeatherZeroService.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: HIGH Description: Console Window Host Exit code: 0 Version: 10.0.19041.1 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 1788 | "C:\Program Files (x86)\WeatherZero\WeatherZero.exe" /start /q=DDB824CF6442D193060B32461EDCD207 | C:\Program Files (x86)\WeatherZero\WeatherZero.exe | WeatherZeroService.exe | ||||||||||||
User: admin Company: Weather Zero Integrity Level: MEDIUM Description: WeatherZero Version: 1.0.0.0 Modules
| |||||||||||||||
| 2172 | C:\WINDOWS\system32\svchost.exe -k NetworkService -p -s Dnscache | C:\Windows\System32\svchost.exe | services.exe | ||||||||||||
User: NETWORK SERVICE Company: Microsoft Corporation Integrity Level: SYSTEM Description: Host Process for Windows Services Version: 10.0.19041.1 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 2652 | \??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1 | C:\Windows\System32\conhost.exe | — | WeatherZeroService.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: HIGH Description: Console Window Host Exit code: 0 Version: 10.0.19041.1 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 3792 | "C:\Program Files (x86)\WeatherZero\WeatherZeroService.exe" | C:\Program Files (x86)\WeatherZero\WeatherZeroService.exe | — | services.exe | |||||||||||
User: SYSTEM Company: Weather Information Service Integrity Level: SYSTEM Description: Weather Delivery Service Version: 1.0.0.9 Modules
| |||||||||||||||
| 4348 | "C:\Users\admin\Desktop\WZSetup.exe" | C:\Users\admin\Desktop\WZSetup.exe | — | explorer.exe | |||||||||||
User: admin Company: Weather Zero Integrity Level: MEDIUM Description: WeatherZero Exit code: 3221226540 Version: 1.0.0.9 Modules
| |||||||||||||||
| 5852 | "C:\Program Files (x86)\WeatherZero\WeatherZeroService.exe" start | C:\Program Files (x86)\WeatherZero\WeatherZeroService.exe | — | WZSetup.exe | |||||||||||
User: admin Company: Weather Information Service Integrity Level: HIGH Description: Weather Delivery Service Exit code: 0 Version: 1.0.0.9 Modules
| |||||||||||||||
| 6228 | "C:\Program Files (x86)\WeatherZero\WeatherZeroService.exe" install | C:\Program Files (x86)\WeatherZero\WeatherZeroService.exe | — | WZSetup.exe | |||||||||||
User: admin Company: Weather Information Service Integrity Level: HIGH Description: Weather Delivery Service Exit code: 0 Version: 1.0.0.9 Modules
| |||||||||||||||
| 7240 | "C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe" /noconfig /fullpaths @"C:\Users\admin\AppData\Local\Temp\27zx3nuw.cmdline" | C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe | WeatherZero.exe | ||||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Visual C# Command Line Compiler Exit code: 0 Version: 8.0.50727.9149 (WinRelRS6.050727-9100) Modules
| |||||||||||||||
Total events
8 420
Read events
8 391
Write events
29
Delete events
0
Modification events
| (PID) Process: | (612) WZSetup.exe | Key: | HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (612) WZSetup.exe | Key: | HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (612) WZSetup.exe | Key: | HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (612) WZSetup.exe | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\WeatherZero |
| Operation: | write | Name: | extparam1 |
Value: | |||
| (PID) Process: | (612) WZSetup.exe | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\WeatherZero |
| Operation: | write | Name: | extparam2 |
Value: | |||
| (PID) Process: | (5852) WeatherZeroService.exe | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\WeatherZero |
| Operation: | write | Name: | gPot |
Value: 12744700954381812043 | |||
| (PID) Process: | (5852) WeatherZeroService.exe | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\WeatherZero |
| Operation: | write | Name: | type |
Value: 1 | |||
| (PID) Process: | (5852) WeatherZeroService.exe | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\WeatherZero |
| Operation: | write | Name: | igi |
Value: DDB824CF6442D193060B32461EDCD207 | |||
| (PID) Process: | (612) WZSetup.exe | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WeatherZero |
| Operation: | write | Name: | DisplayName |
Value: WeatherZero | |||
| (PID) Process: | (612) WZSetup.exe | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WeatherZero |
| Operation: | write | Name: | Publisher |
Value: Weather Zero | |||
Executable files
10
Suspicious files
12
Text files
7
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 612 | WZSetup.exe | C:\Users\admin\AppData\Local\Temp\nsaBAAF.tmp\ioSpecial.ini | text | |
MD5:E2D5070BC28DB1AC745613689FF86067 | SHA256:D95AED234F932A1C48A2B1B0D98C60CA31F962310C03158E2884AB4DDD3EA1E0 | |||
| 612 | WZSetup.exe | C:\Users\admin\AppData\Local\Temp\nsaBAAF.tmp\INetC.dll | executable | |
MD5:2B342079303895C50AF8040A91F30F71 | SHA256:2D5D89025911E2E273F90F393624BE4819641DBEE1606DE792362E442E54612F | |||
| 612 | WZSetup.exe | C:\Users\admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12 | binary | |
MD5:2F20497E4744AC6A2141998E61C810BF | SHA256:0549A091E450165C85047C870B2E4BE44EC7A018E8AA52671BF6459CD66953C4 | |||
| 612 | WZSetup.exe | C:\Users\admin\AppData\Local\Temp\nsaBAAF.tmp\WeatherZeroNSISPlugin.dll | executable | |
MD5:2EAF88651D6DE968BF14EC9DB52FD3B5 | SHA256:070190292DF544DA87F84DC8CF8ECC0A0337085A3FE744FA60CE00A6879B6146 | |||
| 612 | WZSetup.exe | C:\Users\admin\AppData\Local\Temp\nsaBAAF.tmp\modern-wizard.bmp | image | |
MD5:CBE40FD2B1EC96DAEDC65DA172D90022 | SHA256:3AD2DC318056D0A2024AF1804EA741146CFC18CC404649A44610CBF8B2056CF2 | |||
| 612 | WZSetup.exe | C:\Users\admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8 | binary | |
MD5:971C514F84BBA0785F80AA1C23EDFD79 | SHA256:F157ED17FCAF8837FA82F8B69973848C9B10A02636848F995698212A08F31895 | |||
| 612 | WZSetup.exe | C:\Program Files (x86)\WeatherZero\WeatherZeroService.exe | executable | |
MD5:2B149BA4C21C66D34F19214D5A8D3067 | SHA256:95F0E021C978DDD88E2218A7467579255A5AE9552AF2508C4243A4ADEC52D2B8 | |||
| 612 | WZSetup.exe | C:\Program Files (x86)\WeatherZero\WeatherZero.exe.config | xml | |
MD5:3F15E291A768459274F9B10338692974 | SHA256:4C246E60C38399126CA36408BDA7E63BF43B9ECB18F9DAA6E224D36633DC0B69 | |||
| 612 | WZSetup.exe | C:\Program Files (x86)\WeatherZero\Newtonsoft.Json.dll | executable | |
MD5:E346FCECD037F0BE2777231949977587 | SHA256:EFD8CF9A3BC2AB4E15FA33D42771E18D78539759CBF30652DF4C43E6825CE5F0 | |||
| 612 | WZSetup.exe | C:\Program Files (x86)\WeatherZero\WeatherZero.exe | executable | |
MD5:7DC1C6AB3BF2DD1C825914F7F6F31B45 | SHA256:9B92A8F962D7F8FFC9A06BAFECAFF854D88999107641229B17B68D5532E6E17C | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
17
TCP/UDP connections
49
DNS requests
29
Threats
3
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
612 | WZSetup.exe | GET | 200 | 142.250.185.99:80 | http://c.pki.goog/r/gsr1.crl | unknown | — | — | whitelisted |
612 | WZSetup.exe | GET | 200 | 142.250.185.99:80 | http://c.pki.goog/r/r4.crl | unknown | — | — | whitelisted |
6944 | svchost.exe | GET | 200 | 23.216.77.6:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6944 | svchost.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl | unknown | — | — | whitelisted |
4360 | SearchApp.exe | GET | 200 | 192.229.221.95:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D | unknown | — | — | whitelisted |
6132 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
6132 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
1788 | WeatherZero.exe | GET | 200 | 104.18.38.233:80 | http://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTtU9uFqgVGHhJwXZyWCNXmVR5ngQUoBEKIz6W8Qfs4q8p74Klf9AwpLQCEEj8k7RgVZSNNqfJionWlBY%3D | unknown | — | — | whitelisted |
1788 | WeatherZero.exe | GET | 200 | 172.64.149.23:80 | http://ocsp.sectigo.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSdE3gf41WAic8Uh9lF92%2BIJqh5qwQUMuuSmv81lkgvKEBCcCA2kVwXheYCEGIdbQxSAZ47kHkVIIkhHAo%3D | unknown | — | — | whitelisted |
1788 | WeatherZero.exe | GET | 200 | 172.64.149.23:80 | http://ocsp.sectigo.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQVD%2BnGf79Hpedv3mhy6uKMVZkPCQQUDyrLIIcouOxvSK4rVKYpqhekzQwCEGVNm%2FprjYcCNTcc0UvHgY4%3D | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
2464 | RUXIMICS.exe | 20.73.194.208:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
5488 | MoUsoCoreWorker.exe | 20.73.194.208:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6944 | svchost.exe | 20.73.194.208:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
612 | WZSetup.exe | 188.114.97.3:443 | localweatherfree.com | CLOUDFLARENET | NL | unknown |
612 | WZSetup.exe | 142.250.185.99:80 | c.pki.goog | GOOGLE | US | whitelisted |
6944 | svchost.exe | 23.216.77.6:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
6944 | svchost.exe | 184.30.21.171:80 | www.microsoft.com | AKAMAI-AS | DE | whitelisted |
4360 | SearchApp.exe | 104.126.37.144:443 | www.bing.com | Akamai International B.V. | DE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
localweatherfree.com |
| unknown |
c.pki.goog |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
www.bing.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
th.bing.com |
| whitelisted |
login.live.com |
| whitelisted |
Threats
PID | Process | Class | Message |
|---|---|---|---|
2172 | svchost.exe | Device Retrieving External IP Address Detected | INFO [ANY.RUN] External IP Check (ip-api .com) |
2172 | svchost.exe | Device Retrieving External IP Address Detected | ET INFO External IP Lookup Domain in DNS Lookup (ip-api .com) |
1788 | WeatherZero.exe | Device Retrieving External IP Address Detected | ET POLICY External IP Lookup ip-api.com |
Process | Message |
|---|---|
WeatherZero.exe | Load config error: System.InvalidOperationException: There is an error in XML document (0, 0). ---> System.Xml.XmlException: Root element is missing.
at System.Xml.XmlTextReaderImpl.Throw(Exception e)
at System.Xml.XmlTextReaderImpl.ThrowWithoutLineInfo(String res)
at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
at System.Xml.XmlTextReaderImpl.Read()
at System.Xml.XmlTextReader.Read()
at System.Xml.XmlReader.MoveToContent()
at Microsoft.Xml.Serialization.GeneratedAssembly.XmlSerializationReaderWFSettings.Read5_WFSettings()
--- End of inner exception stack trace ---
at System.Xml.Serialization.XmlSerializer.Deserialize(XmlReader xmlReader, String encodingStyle, XmlDeserializationEvents events)
at System.Xml.Serialization.XmlSerializer.Deserialize(TextReader textReader)
at WeatherZero.Config`1.Load()
|
WeatherZero.exe | Load config error: System.InvalidOperationException: There is an error in XML document (0, 0). ---> System.Xml.XmlException: Root element is missing.
at System.Xml.XmlTextReaderImpl.Throw(Exception e)
at System.Xml.XmlTextReaderImpl.ThrowWithoutLineInfo(String res)
at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
at System.Xml.XmlTextReaderImpl.Read()
at System.Xml.XmlTextReader.Read()
at System.Xml.XmlReader.MoveToContent()
at Microsoft.Xml.Serialization.GeneratedAssembly.XmlSerializationReaderWFSettings.Read5_WFSettings()
--- End of inner exception stack trace ---
at System.Xml.Serialization.XmlSerializer.Deserialize(XmlReader xmlReader, String encodingStyle, XmlDeserializationEvents events)
at System.Xml.Serialization.XmlSerializer.Deserialize(TextReader textReader)
at WeatherZero.Config`1.Load()
|
WeatherZero.exe | Get weather thread started
|
WeatherZero.exe | Unhandled exception
System.IO.FileLoadException: Could not load file or assembly 'WeatherZero, Culture=neutral' or one of its dependencies. The located assembly's manifest definition does not match the assembly reference. (Exception from HRESULT: 0x80131040)
File name: 'WeatherZero, Culture=neutral'
at System.Reflection.Assembly._nLoad(AssemblyName fileName, String codeBase, Evidence assemblySecurity, Assembly locationHint, StackCrawlMark& stackMark, Boolean throwOnFileNotFound, Boolean forIntrospection)
at System.Reflection.Assembly.nLoad(AssemblyName fileName, String codeBase, Evidence assemblySecurity, Assembly locationHint, StackCrawlMark& stackMark, Boolean throwOnFileNotFound, Boolean forIntrospection)
at System.Reflection.Assembly.InternalLoad(AssemblyName assemblyRef, Evidence assemblySecurity, StackCrawlMark& stackMark, Boolean forIntrospection)
at System.Reflection.Assembly.Load(AssemblyName assemblyRef)
at System.Windows.Navigation.BaseUriHelper.GetLoadedAssembly(String assemblyName, String assemblyVersion, String assemblyKey)
at MS.Internal.AppModel.ResourceContainer.GetResourceManagerWrapper(Uri uri, String& partName, Boolean& isContentFile)
at MS.Internal.AppModel.ResourceContainer.GetPartCore(Uri uri)
at System.IO.Packaging.Package.GetPartHelper(Uri partUri)
at System.IO.Packaging.Package.GetPart(Uri partUri)
at System.IO.Packaging.PackWebResponse.CachedResponse.GetResponseStream()
at System.IO.Packaging.PackWebResponse.GetResponseStream()
at System.IO.Packaging.PackWebResponse.get_ContentType()
at System.Windows.Media.Imaging.BitmapDecoder.SetupDecoderFromUriOrStream(Uri uri, Stream stream, BitmapCacheOption cacheOption, Guid& clsId, Boolean& isOriginalWritable, Stream& uriStream, UnmanagedMemoryStream& unmanagedMemoryStream, SafeFileHandle& safeFilehandle)
at System.Windows.Media.Imaging.BitmapDecoder.CreateFromUriOrStream(Uri baseUri, Uri uri, Stream stream, BitmapCreateOptions createOptions, BitmapCacheOption cacheOption, RequestCachePolicy uriCachePolicy, Boolean insertInDecoderCache)
at System.Windows.Media.Imaging.BitmapImage.FinalizeCreation()
at System.Windows.Media.Imaging.BitmapImage.EndInit()
at System.Windows.Media.Imaging.BitmapImage..ctor(Uri uriSource, RequestCachePolicy uriCachePolicy)
at System.Windows.Media.Imaging.BitmapImage..ctor(Uri uriSource)
at WeatherZero.MainWindow.OnWindowLoaded(Object sender, RoutedEventArgs e)
at System.Windows.RoutedEventHandlerInfo.InvokeHandler(Object target, RoutedEventArgs routedEventArgs)
at System.Windows.EventRoute.InvokeHandlersImpl(Object source, RoutedEventArgs args, Boolean reRaised)
at System.Windows.UIElement.RaiseEventImpl(DependencyObject sender, RoutedEventArgs args)
at System.Windows.UIElement.RaiseEvent(RoutedEventArgs e)
at System.Windows.BroadcastEventHelper.BroadcastEvent(DependencyObject root, RoutedEvent routedEvent)
at System.Windows.BroadcastEventHelper.BroadcastLoadedEvent(Object root)
at MS.Internal.LoadedOrUnloadedOperation.DoWork()
at System.Windows.Media.MediaContext.FireLoadedPendingCallbacks()
at System.Windows.Media.MediaContext.FireInvokeOnRenderCallbacks()
at System.Windows.Media.MediaContext.RenderMessageHandlerCore(Object resizedCompositionTarget)
at System.Windows.Media.MediaContext.RenderMessageHandler(Object resizedCompositionTarget)
at System.Windows.Media.MediaContext.Resize(ICompositionTarget resizedCompositionTarget)
at System.Windows.Interop.HwndTarget.OnResize()
at System.Windows.Interop.HwndTarget.HandleMessage(Int32 msg, IntPtr wparam, IntPtr lparam)
at System.Windows.Interop.HwndSource.HwndTargetFilterMessage(IntPtr hwnd, Int32 msg, IntPtr wParam, IntPtr lParam, Boolean& handled)
at MS.Win32.HwndWrapper.WndProc(IntPtr hwnd, Int32 msg, IntPtr wParam, IntPtr lParam, Boolean& handled)
at MS.Win32.HwndSubclass.DispatcherCallbackOperation(Object o)
at System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate callback, Object args, Boolean isSingleParame |
WeatherZero.exe | ter)
at System.Windows.Threading.ExceptionWrapper.TryCatchWhen(Object source, Delegate callback, Object args, Boolean isSingleParameter, Delegate catchHandler)
WRN: Assembly binding logging is turned OFF.
To enable assembly bind failure logging, set the registry value [HKLM\Software\Microsoft\Fusion!EnableLog] (DWORD) to 1.
Note: There is some performance penalty associated with assembly bind failure logging.
To turn this feature off, remove the registry value [HKLM\Software\Microsoft\Fusion!EnableLog].
|
WeatherZero.exe | http://api.openweathermap.org/data/2.5/weather?zip=60313,de&units=imperial&appid=70297443c6fd8391e3fc4b7b0d344ae5
|
WeatherZero.exe | {"coord":{"lon":8.6799,"lat":50.1157},"weather":[{"id":800,"main":"Clear","description":"clear sky","icon":"01n"}],"base":"stations","main":{"temp":38.41,"feels_like":34.03,"temp_min":37.18,"temp_max":43,"pressure":1029,"humidity":92,"sea_level":1029,"grnd_level":1011},"visibility":10000,"wind":{"speed":5.75,"deg":90},"clouds":{"all":0},"dt":1730693248,"sys":{"type":2,"id":2081434,"country":"DE","sunrise":1730701239,"sunset":1730735820},"timezone":3600,"id":0,"name":"Frankfurt am Main","cod":200}
|
WeatherZero.exe | System.IO.FileLoadException: Could not load file or assembly 'WeatherZero, Culture=neutral' or one of its dependencies. The located assembly's manifest definition does not match the assembly reference. (Exception from HRESULT: 0x80131040)
File name: 'WeatherZero, Culture=neutral'
at System.Reflection.Assembly._nLoad(AssemblyName fileName, String codeBase, Evidence assemblySecurity, Assembly locationHint, StackCrawlMark& stackMark, Boolean throwOnFileNotFound, Boolean forIntrospection)
at System.Reflection.Assembly.nLoad(AssemblyName fileName, String codeBase, Evidence assemblySecurity, Assembly locationHint, StackCrawlMark& stackMark, Boolean throwOnFileNotFound, Boolean forIntrospection)
at System.Reflection.Assembly.InternalLoad(AssemblyName assemblyRef, Evidence assemblySecurity, StackCrawlMark& stackMark, Boolean forIntrospection)
at System.Reflection.Assembly.Load(AssemblyName assemblyRef)
at System.Windows.Navigation.BaseUriHelper.GetLoadedAssembly(String assemblyName, String assemblyVersion, String assemblyKey)
at MS.Internal.AppModel.ResourceContainer.GetResourceManagerWrapper(Uri uri, String& partName, Boolean& isContentFile)
at MS.Internal.AppModel.ResourceContainer.GetPartCore(Uri uri)
at System.IO.Packaging.Package.GetPartHelper(Uri partUri)
at System.IO.Packaging.Package.GetPart(Uri partUri)
at System.IO.Packaging.PackWebResponse.CachedResponse.GetResponseStream()
at System.IO.Packaging.PackWebResponse.GetResponseStream()
at System.IO.Packaging.PackWebResponse.get_ContentType()
at System.Windows.Media.Imaging.BitmapDecoder.SetupDecoderFromUriOrStream(Uri uri, Stream stream, BitmapCacheOption cacheOption, Guid& clsId, Boolean& isOriginalWritable, Stream& uriStream, UnmanagedMemoryStream& unmanagedMemoryStream, SafeFileHandle& safeFilehandle)
at System.Windows.Media.Imaging.BitmapDecoder.CreateFromUriOrStream(Uri baseUri, Uri uri, Stream stream, BitmapCreateOptions createOptions, BitmapCacheOption cacheOption, RequestCachePolicy uriCachePolicy, Boolean insertInDecoderCache)
at System.Windows.Media.Imaging.BitmapImage.FinalizeCreation()
at System.Windows.Media.Imaging.BitmapImage.EndInit()
at System.Windows.Media.Imaging.BitmapImage..ctor(Uri uriSource, RequestCachePolicy uriCachePolicy)
at System.Windows.Media.Imaging.BitmapImage..ctor(Uri uriSource)
at WeatherZero.MainWindow.SetWeatherCondition(EnumWeatherConditions condition)
at WeatherZero.MainWindow.OnWeatherRequestCompleted(Object sender, RequestEventArgs e)
WRN: Assembly binding logging is turned OFF.
To enable assembly bind failure logging, set the registry value [HKLM\Software\Microsoft\Fusion!EnableLog] (DWORD) to 1.
Note: There is some performance penalty associated with assembly bind failure logging.
To turn this feature off, remove the registry value [HKLM\Software\Microsoft\Fusion!EnableLog].
|
WeatherZero.exe | http://api.openweathermap.org/data/2.5/weather?zip=60313,de&units=metric&appid=70297443c6fd8391e3fc4b7b0d344ae5
|
WeatherZero.exe | {"coord":{"lon":8.6799,"lat":50.1157},"weather":[{"id":800,"main":"Clear","description":"clear sky","icon":"01n"}],"base":"stations","main":{"temp":3.6,"feels_like":1.18,"temp_min":2.88,"temp_max":6.11,"pressure":1029,"humidity":92,"sea_level":1029,"grnd_level":1011},"visibility":10000,"wind":{"speed":2.57,"deg":90},"clouds":{"all":0},"dt":1730693436,"sys":{"type":2,"id":2081434,"country":"DE","sunrise":1730701239,"sunset":1730735820},"timezone":3600,"id":0,"name":"Frankfurt am Main","cod":200}
|