home

wxstations64.exe

WxStations64.exe

System Alerts

The application wxstations64.exe by System Alerts has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
System Alerts LLC  (signed by System Alerts)

Product:
WxStations64.exe

Version:
2.3.2.5

MD5:
c5476577324b4a02743a1e19e3543f70

SHA-1:
08b0ac25f568d041ffffdc74bc06d1c8e389359f

SHA-256:
6829de7edc68254be3966251660843e3145fa84571c2c2c1b8ef0f8c3f960cf5

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/23/2024 1:40:24 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.SystemAlerts
15.6.7.12

File size:
319.5 KB (327,184 bytes)

Product version:
2.3.2.5

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\desktoptemperature\wxstations64.exe

Digital Signature
Signed by:
System Alerts

Authority:
COMODO CA Limited

Valid from:
12/15/2014 6:00:00 PM

Valid to:
12/16/2015 5:59:59 PM

Subject:
CN=System Alerts, O=System Alerts, STREET=250 Park Ave Ste 504, L=Minneapolis, S=MN, PostalCode=55415, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
008E7E5AF881AA310D8C70AF506C594EA1

File PE Metadata
Compilation timestamp:
2/1/2015 11:06:26 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
6144:Wql5aXrXRJIPNmzHuurneZTBBegl1K0yfMYXtHHlLVNLfAPiUwExX5XCj97dcE05:9raXrTIl2eZTBhrSHlZNztUwEB5yj9dq

Entry address:
0x4B0C

Entry point:
48, 83, EC, 28, E8, 63, 74, 00, 00, 48, 83, C4, 28, E9, 56, FE, FF, FF, CC, CC, 40, 53, 48, 83, EC, 40, 48, 8B, D9, EB, 0F, 48, 8B, CB, E8, 01, 75, 00, 00, 85, C0, 74, 13, 48, 8B, CB, E8, 79, 0D, 00, 00, 48, 85, C0, 74, E7, 48, 83, C4, 40, 5B, C3, 8B, 05, F8, EE, 01, 00, 41, B8, 01, 00, 00, 00, 48, 8D, 1D, 5B, 59, 01, 00, 41, 84, C0, 75, 2F, 41, 0B, C0, 48, 8D, 15, 04, D6, 01, 00, 48, 8D, 0D, BD, EE, 01, 00, 89, 05, CF, EE, 01, 00, E8, D2, 18, 00, 00, 48, 8D, 0D, 47, 45, 01, 00, 48, 89, 1D, A4, EE, 01, 00...
 
[+]

Entropy:
7.5594

Code size:
96.5 KB (98,816 bytes)

Remove wxstations64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.