home

Deskman.exe

Deskman Network

Anfibia Software

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘DNET’.
Publisher:
Anfibia Software  (signed and verified)

Product:
Deskman Network

Description:
Deskman Helper

Version:
1.0.0.402

MD5:
24c98598c915e19526877b90f5742305

SHA-1:
580f0bce23ddd8addda4403d3a3a86d9d44133fb

SHA-256:
9a691b109bb488ba065019316deefbbbd4c420a609c95d0a7e9d6a8fa7022ef7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 10:45:53 PM UTC  (today)

File size:
5.2 MB (5,424,216 bytes)

Product version:
1.0.0.402

Copyright:
Copyright (c) 2000-2013 Anfibia Software.

Trademarks:
Anfibia Deskman is a trademark of Anfibia Software. Other marks are the properties of their respective owners.

Original file name:
Deskman.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\anfibia deskman network\deskman.exe

Digital Signature
Signed by:
Anfibia Software

Authority:
COMODO CA Limited

Valid from:
1/20/2013 4:00:00 PM

Valid to:
1/21/2014 3:59:59 PM

Subject:
CN=Anfibia Software, O=Anfibia Software, STREET=Sant Antoni 16 1-4, L=Cerdanyola del valles, S=Barcelona, PostalCode=08290, C=ES

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00DBD3B23658952C48E56D6E36F36E2037

File PE Metadata
Compilation timestamp:
6/8/2013 2:27:33 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:JnElj+RcGLHWqY4yKbw+LhFrbPgDqx/v19ZOh2gSE:JEhKoKdXPgWx/v19rE

Entry address:
0x45AEFC

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, CC, 89, 84, 00, E8, 9B, 20, BB, FF, 8B, 1D, 94, F9, 86, 00, E8, 10, 50, EA, FF, 84, C0, 0F, 85, 80, 00, 00, 00, A1, E4, EB, 86, 00, 8B, 15, 40, F7, 86, 00, 8B, 12, E8, B2, E9, BA, FF, A1, E4, FF, 86, 00, BA, B4, AF, 85, 00, E8, 37, DC, BA, FF, 8B, 03, 33, D2, E8, 86, DD, CE, FF, 8B, 03, 33, D2, E8, 45, 00, CF, FF, 8B, 03, C6, 40, 5F, 00, 8B, 03, E8, 38, E3, CE, FF, 8B, 0D, 40, EC, 86, 00, 8B, 03, 8B, 15, 6C, 39, 84, 00, E8, 3D, E3, CE, FF, 8B, 0D, C8, F7, 86, 00, 8B, 03, 8B...
 
[+]

Entropy:
6.5014

Developed / compiled with:
Microsoft Visual C++

Code size:
4.3 MB (4,560,384 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
DNET

Command:
"C:\Program Files\anfibia deskman network\deskman.exe"


Scan Deskman.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.