home

diskediag.exe

System Utilities

Golden Plains Software, LLC.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘CoreChipTiManager’.
Publisher:
GP Systems Integration  (signed by Golden Plains Software, LLC.)

Product:
System Utilities

Version:
7.2.0.0

MD5:
fb2e0f1365bf4164c184109f87c61f2f

SHA-1:
a1beacbc0dd78f6f17a3facb587e6254aacfc6d3

SHA-256:
0ec25168051c91453b4aa5491edb11e46719268fbab3c4d54bd80111bdfc84d5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:08:11 PM UTC  (today)

File size:
3.4 MB (3,615,360 bytes)

Product version:
7.2.0.0

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\diskediag.exe

Digital Signature
Signed by:
Golden Plains Software, LLC.

Authority:
GlobalSign nv-sa

Valid from:
2/21/2012 5:57:26 PM

Valid to:
5/21/2015 6:57:26 PM

Subject:
E=sales@gpsoftdev.com, CN="Golden Plains Software, LLC.", O="Golden Plains Software, LLC.", S=Nevada, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112138AA3AFB98A3701A84679F8A41A749FC

File PE Metadata
Compilation timestamp:
3/26/2015 1:47:13 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
49152:F6CxdzH3ltYVSLxaw3TcX+C7pXyB7volQlEKC18ZN3X3JvT4TVoS4XfP:F5dzH3XH1anmvolQlE4BXflfP

Entry address:
0x20CB71

Entry point:
E8, 74, DA, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 10, 30, 71, 00, E8, 09, 3F, 00, 00, E8, 99, 7A, 00, 00, 0F, B7, F0, 6A, 02, E8, 07, DA, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 58, C0, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Code size:
2.2 MB (2,356,224 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CoreChipTiManager

Command:
C:\windows\diskediag.exe


Scan diskediag.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.