home

DesktopTemperature.exe

Desktop Temperature

System Alerts LLC

The application DesktopTemperature.exe, “DesktopTemperature” by System Alerts has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Desktop Temperature Monitor by System Alerts LLC which is a potentially unwanted software program.
Publisher:
System Alerts LLC  (signed and verified)

Product:
Desktop Temperature

Description:
DesktopTemperature

Version:
1.24.0.0

MD5:
ebe0694c3a75d975f81c98a6dcb09219

SHA-1:
61e3d081c0f554c5e72d06b5295f60fed1a3e956

SHA-256:
5169819815666143061c3f7dade698360821a18a439189398e4f154c2533bfa9

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
12/25/2024 12:37:32 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.SystemAlerts.S
14.9.29.12

File size:
54.2 KB (55,528 bytes)

Product version:
1.24.0.0

Copyright:
Copyright © 2014 System Alerts LLC. All Rights Reserved.

Original file name:
DesktopTemperature.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\desktoptemperature\desktoptemperature.exe

Digital Signature
Signed by:
System Alerts LLC

Authority:
COMODO CA Limited

Valid from:
11/12/2013 4:00:00 PM

Valid to:
11/13/2014 3:59:59 PM

Subject:
CN=System Alerts LLC, O=System Alerts LLC, STREET=250 Park Ave Ste 504, L=Minneapolis, S=MN, PostalCode=55415, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00D56696E8C583BF7F09BCCC24A2AB8310

File PE Metadata
Compilation timestamp:
7/10/2014 8:57:24 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:OPWv7wcuMz0j/uer4QFSqjv0vT0kfchD2e:SWv7wcp0j/uy4QJGT0kfSN

Entry address:
0xD31E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.7305

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
45 KB (46,080 bytes)

User Start Menu Item
Name:
DesktopTemperature.exe


The file DesktopTemperature.exe has been discovered within the following programs.

Desktop Temperature Monitor  by System Alerts LLC
The free version is ad-supported software (also known as adware) web browser plugin that displays advertisements such as coupon ads in the browser that are displayed on web pages that are not associated with the plugin or would not otherwise appear.
desktoptemperaturemonitor.com
74% remove it
 
Powered by Should I Remove It?

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to host201-rangeA-akamai-aanp.cdn.enyrk.isp.sky.com  (2.127.246.201:80)

TCP (HTTP):
Connects to a23-67-255-202.deploy.static.akamaitechnologies.com  (23.67.255.202:80)

Remove DesktopTemperature.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.