home

DesktopButton.exe

SecureDesktop Return Button

The Creative Engine Limited

Publisher:
The Creative Engine Limited  (signed and verified)

Product:
SecureDesktop Return Button

Version:
1.0.0.19

MD5:
a89ae1f5477ac19b9456f574be4f1b77

SHA-1:
2cf25db13f64ef40e4c402d72ef4fc048200ab3e

SHA-256:
109a2379b311177ffb985648fe17c5b006380f271c7dc7630cd997b15f2798cf

Scanner detections:
3 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/26/2024 7:48:03 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
BACKDOOR.Trojan
9.0.1.0171

Panda Antivirus
Trj/Thed.M
14.06.20.04

Trend Micro House Call
TROJ_GEN.F47V0418
7.2.171

File size:
6 MB (6,250,056 bytes)

Product version:
1.0.0.19

Copyright:
2012 The Creative Engine Limited

Original file name:
DesktopButton.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
The Creative Engine Limited

Authority:
VeriSign, Inc.

Valid from:
5/28/2009 2:00:00 AM

Valid to:
7/9/2012 1:59:59 AM

Subject:
CN=The Creative Engine Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=The Creative Engine Limited, L=Woking, S=Surrey, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5F5B0B69CAC28E93FC51E47776CA1309

File PE Metadata
Compilation timestamp:
7/24/2011 10:35:19 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
98304:mTt2Ns41/nwPhVvL3mdQvcOKsYJ5T0cSJHG7rL/Ua17Ax7vhm6Mo0WCcRRICrUe:mTsVwLTnvc9sYfgcSJwDUCAxdmaJCcTD

Entry address:
0x1280

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 01, 00, 00, 00, FF, 15, 5C, 73, 40, 00, E8, B8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 5C, 73, 40, 00, E8, 98, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, 74, 73, 40, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, 68, 73, 40, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, 89, E5, 83, 3D, 10, A1, 40, 00, 00, 75, 0A, C7, 05, 10, A1, 40, 00, D0, 5D, 40, 00, A1, 10, A1, 40, 00, 5D, C3, 55, 89, E5...
 
[+]

Packer / compiler:
MingWin32 - Dev C++ v4.x (h)

Code size:
19.5 KB (19,968 bytes)

Scan DesktopButton.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.