home

diskview.exe

DiskView

Microsoft Corporation

Publisher:
Sysinternals - www.sysinternals.com  (signed by Microsoft Corporation)

Product:
DiskView

Description:
Sysinternals Diskview

Version:
2.40

MD5:
16ccd5f530a930d9a03e3e06a6e1ec1b

SHA-1:
21963aec7ee0cb808ad25209923be500ccd5948e

SHA-256:
d186dac0a61eb1331d1371c733ec4b1925baed55f3c17f67efece537496050ff

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/19/2024 7:36:55 AM UTC  (today)

File size:
567.4 KB (580,984 bytes)

Product version:
2.40

Copyright:
Copyright (C) 2010 Bryce Cogswell

Original file name:
DiskView

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\diskview.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/7/2009 10:40:29 PM

Valid to:
3/7/2011 10:40:29 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101CF3E00000000000F

File PE Metadata
Compilation timestamp:
3/24/2010 8:55:37 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:JWxhW1CGbjzjhTwfvY2CHNskW7KWsJV6YwdZ4vXy:JCCjt+vY2CmkW7KBJQYYZEy

Entry address:
0xC983

Entry point:
E8, CF, AB, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 56, 8B, 75, 08, 57, 56, E8, 57, AD, 00, 00, 59, 83, F8, FF, 74, 50, A1, 00, F3, 53, 00, 83, FE, 01, 75, 09, F6, 80, 84, 00, 00, 00, 01, 75, 0B, 83, FE, 02, 75, 1C, F6, 40, 44, 01, 74, 16, 6A, 02, E8, 2C, AD, 00, 00, 6A, 01, 8B, F8, E8, 23, AD, 00, 00, 59, 59, 3B, C7, 74, 1C, 56, E8, 17, AD, 00, 00, 59, 50, FF, 15, 54, 42, 43, 00, 85, C0, 75, 0A, FF, 15, 10, 42, 43, 00, 8B, F8, EB, 02, 33, FF, 56, E8, 73, AC, 00, 00, 8B, C6, C1, F8, 05, 8B, 04, 85...
 
[+]

Entropy:
6.5763

Code size:
201.5 KB (206,336 bytes)

The file diskview.exe has been discovered within the following programs.

NirSoft BlueScreenView  by NirSoft
Publisher's description - “BlueScreenView scans all your minidump files created during 'blue screen of death' crashes, and displays the information about all crashes in one table.”
www.nirsoft.net/utils/blue_screen_view.html
7% remove it
NirSoft ServiWin  by NirSoft
Publisher's description - “ServiWin utility displays the list of installed drivers and services on your system. For some of them, additional useful information is displayed: file description, version, product name, company that created the driver file, and more.”
www.nirsoft.net/utils/serviwin.html
10% remove it
PC House Keeper 2012  by DanuSoft
Publisher's description - “PC House Keeper 2012 is the most comprehensive PC maintenance software for Windows Vista and Windows 7 computers with 20 different tools (and counting) that are specifically designed to help diagnose and improve your computer’s system and network performance.”
www.danusoft.com
About 6% of users remove it
SUPERAntiSpyware  by SUPERAntiSpyware.com
SUPERAntiSpyware is a software application distributed as shareware which can detect and remove spyware, adware, trojan horses, rogue security software, computer worms, rootkits, parasites and other potentially harmful software applications.
www.superantispyware.com/support.html
25% remove it
Sysinternals Software  by Sysinternals - www.sysinternals.com
technet.microsoft.com/en-us/sysinternals/bb545027.aspx
4% remove it
SysInternalsUpdater  by Wieldraaijer
About 1% of users remove it
 
Powered by Should I Remove It?

The file diskview.exe has been seen being distributed by the following 2 URLs.

https://live.sysinternals.com/DiskView.exe

http://live.sysinternals.com/DiskView.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.