» deskspacetrialsetup.exe
Overview
Analysis
File Details
Downloads (9)

deskspacetrialsetup.exe

DeskSpace

Otaku Software Pty Ltd

This is a self-extracting archive and installer. The file has been seen being downloaded from f51.y8top.net and multiple other hosts.

File name:

Publisher:

Otaku Software Pty Ltd (signed and verified)

Product:

DeskSpace

Version:

1.5.8.14

MD5:

86f3b884d79ce83b4b90fef7f2c445a2

SHA-1:

56f5b01709ad47164e517d359e7ef6ee3c538fa2

SHA-256:

f6ca5ca773f73196e094af4466e7c705eb7f36ce0ee88d87e330d7353d07d5f6

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

11/27/2024 12:03:29 AM UTC (today)

Scan engine

Detection

Engine version

Rising Antivirus

PE:Malware.XPACK-LNR/Heur!1.5594

23.00.65.14531

File size:

13.6 MB (14,238,288 bytes)

Product version:

1.5.8.14

Trademarks:

DeskSpace is a trademark of Otaku Software Pty Ltd

Original file name:

DeskSpace15814TrialSetup.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\deskspacetrialsetup.exe

Digital Signature

Signed by:

Otaku Software Pty Ltd

Authority:

Thawte, Inc.

Valid from:

5/23/2012 6:00:00 PM

Valid to:

5/24/2013 5:59:59 PM

Subject:

CN=Otaku Software Pty Ltd, OU=Secure Application Development, O=Otaku Software Pty Ltd, L=Perth, S=Western Australia, C=AU

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

0090B66EB8D2B598C3116D61DCEF3B1A

File PE Metadata

Compilation timestamp:

4/10/2010 6:19:38 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

393216:TczVR68S7ghAAOp3QS6gEEv+Ji21lGEqoTDVsXuRJ+:F8D/LIEE2kDEPVnc

Entry address:

0x170030

Entry point:

60, BE, 00, B0, 56, 00, 8D, BE, 00, 60, E9, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB... 
[+]

Entropy:

7.9721

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

24 KB (24,576 bytes)

The file deskspacetrialsetup.exe has been seen being distributed by the following 9 URLs.

http://f51.y8top.net/2107tmp/cf/soft/2013/8/ba/.../deskspace_15814.exe

http://dw.uptodown.com/dwn/u9jtf8s9RbgFJOw0K6iXD36ELdNT72P33LolY41usz0MgkD113IgJ4Ac4DQPtAbBiufO9DMjqeq58fIpg6-L50KhZzeAmThQaoTsr6ZDK9RcLQ9mFB3t6Z09vyMJdvWC/_WFXzdV3u5DMNsv6wE_-RMr3lDVvfOa37C20lyxuy1PoOtAZPLJB25LPT3F5iSF0zyvKmPps1EtCibyZtO94RdDqaQISoZExZjfBocD3V45kFCmuU8B7Z1tv1WHeGhWm/.../

http://www.jetelecharge.com/.../telp.php?id=1231

http://lb.cdn.m6web.fr/d/c/a/851c7d3ec3073161f15c9d06a3a8e545/55a41c0b/soft/.../deskspace_1-5-8-14_fr_45134.exe

http://dw2.en.uptodown.com/dw/1426105204/.../deskspace-1-5-8-14-es-en-win.exe

http://dw2.en.uptodown.com/dl/1426101366/.../deskspace-1-5-8-14-es-en-win.exe

http://dw.en.uptodown.com/dl/1426101366/.../deskspace-1-5-8-14-es-en-win.exe

http://www.otakusoftware.com/.../DeskSpaceTrialSetup.exe

http://www.otakusoftware.com/deskspace/.../

Scan deskspacetrialsetup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.