home

diskinfos.exe

CrystalDiskInfo

Noriyuki MIYAZAKI

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘CrystalDiskInfo’.
Publisher:
Crystal Dew World  (signed by Noriyuki MIYAZAKI)

Product:
CrystalDiskInfo

Version:
6.7.3.2016

MD5:
6d18b148d1c8bab463247b6b07864e0c

SHA-1:
3089badf6776fcfe3c7e17ee4da01b8d3df5338e

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 12:45:02 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Malware.Generic(Thunder)!1.A1C4 [F]
23.00.65.16124

File size:
2.6 MB (2,768,504 bytes)

Product version:
6.7.3.2016

Copyright:
(C) 2008-2016 hiyohiyo

Original file name:
DiskInfo.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\portable soft (system disk)\crystal disk info 6.7.3 portable (official)\crystal disk info\diskinfos.exe

Digital Signature
Signed by:
Noriyuki MIYAZAKI

Authority:
GlobalSign nv-sa

Valid from:
2/5/2013 5:53:40 PM

Valid to:
2/6/2016 5:53:40 PM

Subject:
CN=Noriyuki MIYAZAKI, C=JP

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121D6683A851E981F3776DC28605DC830EF

File PE Metadata
Compilation timestamp:
1/24/2016 2:07:53 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
49152:M5IGjf11X+rlXRYikZHQste0qoKWWUY/Fstni2jk5ZbaZQeC5n:M6GjN10lXRYiAwg/qoKWWRonJ0ZbaZQB

Entry address:
0x17C93B

Entry point:
E8, 54, 0C, 00, 00, E9, 80, FE, FF, FF, 3B, 0D, F4, 3F, 63, 00, F2, 75, 02, F2, C3, F2, E9, 69, 06, 00, 00, 55, 8B, EC, F6, 45, 08, 01, 56, 8B, F1, C7, 06, 80, D8, 5E, 00, 74, 0A, 6A, 0C, 56, E8, C9, 04, 00, 00, 59, 59, 8B, C6, 5E, 5D, C2, 04, 00, 53, 56, 57, 6A, 00, 68, A0, 0F, 00, 00, 68, 84, F4, 63, 00, E8, 98, 53, 00, 00, 83, C4, 0C, 68, F8, 86, 60, 00, FF, 15, D0, 14, 5C, 00, 8B, F0, 85, F6, 0F, 84, 8C, 00, 00, 00, 68, 84, D8, 5E, 00, 56, FF, 15, D4, 14, 5C, 00, 68, A0, D8, 5E, 00, 56, 8B, D8, FF, 15...
 
[+]

Code size:
1.7 MB (1,832,448 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CrystalDiskInfo

Command:
"C:\Program Files\portable soft (system disk)\crystal disk info 6.7.3 portable (official)\crystal disk info\diskinfos.exe" \startup


Scan diskinfos.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.