home

WxLocal.exe

WxLocal

Danny Lloyd

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘WxLocal’. This is installed with multiple programs including Weather Message WxLocal Net Update and Weather Message Net.
Publisher:
Weather Message Software LLC  (signed by Danny Lloyd)

Product:
WxLocal

Version:
4.1.5615.11017

MD5:
014968c2d5641a150d7d5314c0394284

SHA-1:
7945fcaf8ab44eb10c0771b2a26fb4c6cd08cb5e

SHA-256:
6aaa2610f406a078cf2f6e0f7125e3dd2bbf60083eba31325b135bfeb683b9ed

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:54:46 AM UTC  (today)

File size:
198.2 KB (202,928 bytes)

Product version:
4.1.5615.11017

Copyright:
Copyright © 2003-2015 Weather Message Software LLC

Original file name:
WxLocal.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\wxmesgnet\wxlocal.exe

Digital Signature
Signed by:
Danny Lloyd

Authority:
StartCom Ltd.

Valid from:
12/1/2013 3:03:32 AM

Valid to:
12/2/2015 10:24:55 AM

Subject:
E=danny@weathermessage.com, CN=Danny Lloyd, L=Dadeville, S=Alabama, C=US, Description=Ks2KEP2QLBbCVo4s

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0BFB

File PE Metadata
Compilation timestamp:
5/17/2015 7:40:18 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:kxuPcSdhDhJJzwEzhzHDXLclAkZior8nPntBJm:kEJzZDeZiorcm

Entry address:
0x3089E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.7106

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
186.5 KB (190,976 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WxLocal

Command:
C:\Program Files\wxmesgnet\wxlocal.exe


The file WxLocal.exe has been discovered within the following programs.

Weather Message Net  by Weather Message Software LLC
www.weathermessage.com
About 8% of users remove it
Weather Message Net Update  by Weather Message Software LLC
About 9% of users remove it
Weather Message WxDataSave Net  by Weather Message Software LLC
About 1% of users remove it
Weather Message WxDataSave Net Update  by Weather Message Software LLC
About 1% of users remove it
Weather Message WxLocal Net  by Weather Message Software LLC
About 2% of users remove it
Weather Message WxLocal Net Update  by Weather Message Software LLC
About 3% of users remove it
 
Powered by Should I Remove It?

Scan WxLocal.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.