home

station.exe

StopSign Software Station

eAcceleration Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SoftwareStation’.
Publisher:
eAcceleration Corp  (signed by eAcceleration Corporation)

Product:
StopSign Software Station

Version:
2, 0, 0, 96

MD5:
afce01895c7f77ab07d0fafae8d527a3

SHA-1:
d432ca61f749bd1bdfda7435bcaeddb7dd0ef559

SHA-256:
a235324e33effa8367250f74d1eb49c0188ae175ac16139402a1214e34f5fdfb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 4:05:58 AM UTC  (today)

File size:
138.4 KB (141,712 bytes)

Product version:
2, 0, 0, 96

Copyright:
Copyright © 2002 - 2013 eAcceleration Corp. All Rights Reserved.

Trademarks:
eAcceleration® and StopSign® are registered trademarks of eAcceleration Corp

Original file name:
station.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\eacceleration\station\station.exe

Digital Signature
Signed by:
eAcceleration Corporation

Authority:
VeriSign, Inc.

Valid from:
10/10/2012 8:00:00 PM

Valid to:
11/6/2014 6:59:59 PM

Subject:
CN=eAcceleration Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=eAcceleration Corporation, L=Poulsbo, S=Washington, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3704EE4D5931B6288173CB9129335BFA

File PE Metadata
Compilation timestamp:
6/3/2013 1:25:36 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:4Us//rq+pn7RonFSdfeASH97PzhhGtAQQ:s7RonFSdfeASHVfJ

Entry address:
0x30E1

Entry point:
E8, 46, 48, 00, 00, E9, 16, FE, FF, FF, B8, 4D, 84, 40, 00, A3, D8, 33, 41, 00, C7, 05, DC, 33, 41, 00, 49, 7B, 40, 00, C7, 05, E0, 33, 41, 00, 07, 7B, 40, 00, C7, 05, E4, 33, 41, 00, 3B, 7B, 40, 00, C7, 05, E8, 33, 41, 00, B1, 7A, 40, 00, A3, EC, 33, 41, 00, C7, 05, F0, 33, 41, 00, C7, 83, 40, 00, C7, 05, F4, 33, 41, 00, C7, 7A, 40, 00, C7, 05, F8, 33, 41, 00, 31, 7A, 40, 00, C7, 05, FC, 33, 41, 00, C0, 79, 40, 00, C3, E8, 9B, FF, FF, FF, E8, 7E, 53, 00, 00, 83, 7C, 24, 04, 00, A3, AC, 43, 41, 00, 74, 05...
 
[+]

Entropy:
6.5911

Code size:
56 KB (57,344 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SoftwareStation

Command:
"C:\Program Files\eacceleration\station\station.exe" \b startup


Scan station.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.