home

wxstations64.exe

WxStations64.exe

System Alerts

The application wxstations64.exe by System Alerts has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
System Alerts LLC  (signed by System Alerts)

Product:
WxStations64.exe

Version:
2.3.3.0

MD5:
3edfa364c9ea983c4e9a0d6cb330f758

SHA-1:
9bd7d231eeb141907620f25fbb22240c2a33423b

SHA-256:
3fbf0819c5d713ae458ff0ef22789c94625e2a4250211d9f93234f26a2483d46

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/23/2024 2:00:17 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.SystemAlerts
15.6.7.12

File size:
320.7 KB (328,416 bytes)

Product version:
2.3.3.0

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\desktoptemperature\wxstations64.exe

Digital Signature
Signed by:
System Alerts

Authority:
COMODO CA Limited

Valid from:
12/15/2014 4:00:00 PM

Valid to:
12/16/2015 3:59:59 PM

Subject:
CN=System Alerts, O=System Alerts, STREET=250 Park Ave Ste 504, L=Minneapolis, S=MN, PostalCode=55415, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
008E7E5AF881AA310D8C70AF506C594EA1

File PE Metadata
Compilation timestamp:
2/23/2015 2:59:53 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
6144:Eql5aXrXRJIPNmzHuurnQZTBBeglkuUdK5zanbuaMEbSOnGRi:nraXrTIl2QZTBkuUdQzmqa/b9GRi

Entry address:
0x4B0C

Entry point:
48, 83, EC, 28, E8, 63, 74, 00, 00, 48, 83, C4, 28, E9, 56, FE, FF, FF, CC, CC, 40, 53, 48, 83, EC, 40, 48, 8B, D9, EB, 0F, 48, 8B, CB, E8, 01, 75, 00, 00, 85, C0, 74, 13, 48, 8B, CB, E8, 79, 0D, 00, 00, 48, 85, C0, 74, E7, 48, 83, C4, 40, 5B, C3, 8B, 05, F8, EE, 01, 00, 41, B8, 01, 00, 00, 00, 48, 8D, 1D, 5B, 59, 01, 00, 41, 84, C0, 75, 2F, 41, 0B, C0, 48, 8D, 15, 04, D6, 01, 00, 48, 8D, 0D, BD, EE, 01, 00, 89, 05, CF, EE, 01, 00, E8, D2, 18, 00, 00, 48, 8D, 0D, 47, 45, 01, 00, 48, 89, 1D, A4, EE, 01, 00...
 
[+]

Entropy:
7.5612

Code size:
96.5 KB (98,816 bytes)

Remove wxstations64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.