home

diskaid.exe

DigiDNA Sarl

Publisher:
DigiDNA Sarl  (signed and verified)

MD5:
93d46c1fba4fc1f976f2efc869bda559

SHA-1:
4fc9fed13959d51b9077923ccd753c29ae593cd2

SHA-256:
50dd2b527222dc8bc6d503f1719ee9b95724b6a9be3fdfb039d4747f0680235a

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 9:04:38 PM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0718
7.2.222

File size:
5.5 MB (5,811,792 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\digidna\diskaid\diskaid.exe

Digital Signature
Signed by:
DigiDNA Sarl

Authority:
Thawte, Inc.

Valid from:
8/2/2011 5:30:00 AM

Valid to:
10/16/2013 5:29:59 AM

Subject:
CN=DigiDNA Sarl, OU=SECURE APPLICATION DEVELOPMENT, O=DigiDNA Sarl, L=Geneva, S=Geneva, C=CH

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
54383B99D35FE85852CE7067B34933E7

File PE Metadata
Compilation timestamp:
6/10/2013 7:59:49 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
98304:dr+7cGkPn88t4eq4eEs4eo4en4eo4e1V1T4e44ep4eH4eSKW4eo:hT8/ePeEde5e4e5e1V1UeJemeYeSK7eo

Entry address:
0xB4AF4

Entry point:
FF, 25, F4, 72, 4B, 00, CC, CC, CC, CC, CC, CC, 8D, 4D, D0, FF, 25, 48, 71, 4B, 00, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, C8, 33, C8, E8, 80, 91, F6, FF, 8B, 4A, F8, 33, C8, E8, 76, 91, F6, FF, B8, C8, 4C, 92, 00, E9, 12, FE, FF, FF, 8B, 4D, F0, FF, 25, 34, 72, 4B, 00, 8B, 4D, F0, 83, C1, 10, FF, 25, 48, 71, 4B, 00, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, F8, 33, C8, E8, 46, 91, F6, FF, B8, FC, 4C, 92, 00, E9, E2, FD, FF, FF, 8B, 4D, F0, FF, 25, 34, 72, 4B, 00, 8B, 4D, F0, 83, C1, 10, FF, 25, 48, 71, 4B, 00, 8B...
 
[+]

Entropy:
6.1248

Code size:
724.5 KB (741,888 bytes)

Scan diskaid.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.