home

deskspace.exe

DeskSpace

Otaku Software Pty Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘deskspace’.
Publisher:
Otaku Software Pty Ltd  (signed and verified)

Product:
DeskSpace

Description:
DeskSpace 1.5.6.2

Version:
1.5.6.2

MD5:
dbf2b8aae51c03bbdc93836f7bc16f54

SHA-1:
34c9aec8dea7334601d6bc411f2126936df27933

SHA-256:
d1bbdec22decf687b8a714f94db972ad275d09f646be8305546376fbcfc2eefa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 3:43:56 AM UTC  (today)

File size:
2.4 MB (2,558,448 bytes)

Product version:
1.5.6.2

Copyright:
© 2007-2009 Otaku Software Pty Ltd

Original file name:
deskspace.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\deskspace\deskspace.exe

Digital Signature
Signed by:
Otaku Software Pty Ltd

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
5/15/2009 1:00:00 AM

Valid to:
5/16/2010 12:59:59 AM

Subject:
CN=Otaku Software Pty Ltd, OU=Secure Application Development, O=Otaku Software Pty Ltd, L=Perth, S=Western Australia, C=AU

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
0ACB117587E20F40ED838507EF05B99D

File PE Metadata
Compilation timestamp:
10/25/2009 5:14:39 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x2437D5

Entry point:
E9, 56, B8, 01, 00, 11, FA, F8, A9, 6A, E1, DC, 31, 77, BB, 46, 48, 01, FA, 0D, 08, 9E, 37, 00, 00, A9, DC, 48, FC, 7E, 2F, 6F, 4C, CD, 93, AA, 01, A1, 34, A5, 23, 30, 2C, 61, E9, 54, 53, 02, 00, 5B, 68, E8, F4, 63, 00, E9, BD, 1B, FE, FF, 81, E7, 51, ED, 79, EF, 81, F7, 5C, 20, 69, C5, F7, C7, 00, 10, 00, 00, E9, BA, 6E, 01, 00, 89, 34, 24, 5E, 68, DE, A4, 60, 20, 5A, E9, 09, 77, 00, 00, 8B, CC, 81, C1, 10, 00, 00, 00, 8B, 09, C7, 01, 13, 00, 01, 00, 81, C1, B8, 00, 00, 00, E9, 56, 05, 00, 00, C6, 00, C3...
 
[+]

Packer / compiler:
Xtreme-Protector v1.05

Code size:
1.2 MB (1,277,440 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
deskspace

Command:
C:\Program Files\deskspace\deskspace.exe


Scan deskspace.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.