home

deskhop.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from hd-a.services.vnc.com.
MD5:
d89ab5441b16c33fcca7b36935832119

SHA-1:
0fe1574933ea4b8af6e82c13ad6bdb8bf7806c6e

SHA-256:
fbf53b1394b93a3af934554433bcc42951a1243f82ce6edf917813a38c013022

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 3:42:25 AM UTC  (today)

File size:
192.4 KB (197,000 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
11/6/2013 4:14:34 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:loIo2ahFHMYk7MNAo15+3QKJLR8wbuh9/smfbXWK57QqzODC/z7HL8uYYn5r:aI1kFHw0ALPVs3ffbJ1zCsbfb5r

Entry address:
0x228F50

Entropy:
7.9970  (probably packed)

Code size:
724 KB (741,376 bytes)

The file deskhop.exe has been seen being distributed by the following URL.

https://hd-a.services.vnc.com/download/1.1/binary/win/server-6-x86.exe/_mQNLSi1Z6KbPbZPCGDq_r7Mvn4RGMTdncdoirrnP6MNh6DGHWw5jP_OR5DwO46Z0GYw8sN5lRKsEnrKc4ggk61AZlUDlY5Ej5qG77UIOpBJvzNksGfDpV0TCn0TltVPJK-I3j-1A_O1n1fPussx5G7tVggrvjhlxw9npXVrbT0utOfsjyxbQTBpRQsrkQ5zf1YGls5xhTfjtjwzuTPFVyVW8S6C65h9wTjDD0u4oN3Tt5dw8cNeT0ByvG67i-aHk4y3cEZWl4lzQ86fPG9u9qlxcU1KjZneF7MJgrJlWnMkmWaAjkaN4TbA6k2BRPsCYWPfw3kYBI5Kmfs-PFdwRzdOxOTi_tbO5SnJo3hOYm3yRJfOqokmfkSL5_AjDK2lX9OnbB1tOt_YrDoK8lEr4Ly39S0d2QNjl1OE8FyoeZP8/_Ccuv/.../deskhop.exe

Scan deskhop.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.