home

PrvDisk.exe

Dekart Private Disk

Dekart

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Dekart Private Disk’.
Publisher:
Dekart  (signed and verified)

Product:
Dekart Private Disk

Description:
Private Disk Manager

Version:
2.05.17

MD5:
beceef3296d3b99fb0c8082dce45a081

SHA-1:
767aca4dde66fd1acb1873605528d30a930eed41

SHA-256:
73e3c26dcc808256bd48f8cc169f51560eb7da4f0cdab1d21bad009f3dc30e03

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/7/2024 8:02:57 PM UTC  (today)

File size:
233.6 KB (239,256 bytes)

Product version:
2.05

Copyright:
Copyright © Dekart

Original file name:
PrvDisk.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\dekart\private disk\prvdisk.exe

Digital Signature
Signed by:
Dekart

Authority:
Dekart

Valid from:
2/9/2005 1:30:08 PM

Valid to:
2/9/2006 1:30:08 PM

Subject:
E=info@dekart.com, CN=Dekart, O=Dekart, L=Chisinau, S="Moldova, Republic of", C=MD

Issuer:
E=info@dekart.com, CN=Dekart Publisher Certificate Authority, OU=Data Security Department, O=Dekart, L=Chisinau, S=Republic of Moldova, C=MD

Serial number:
420A0250

File PE Metadata
Compilation timestamp:
4/15/2005 6:33:19 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:bkN9a15FCV3CAfMFWdbh2VX8ZfFkTJvgink5iEvz2+52s3BGHkrBBpRF2:8fCxXwuRk5iLKV3i

Entry address:
0x1280F

Entry point:
55, 8B, EC, 6A, FF, 68, 28, 83, 41, 00, 68, BC, 23, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 70, 81, 41, 00, 33, D2, 8A, D4, 89, 15, 78, 3A, 42, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 74, 3A, 42, 00, C1, E1, 08, 03, CA, 89, 0D, 70, 3A, 42, 00, C1, E8, 10, A3, 6C, 3A, 42, 00, 33, F6, 56, E8, 48, 0D, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, FF, 3A, 00, 00, FF, 15, A0, 80, 41, 00, A3, A0, 4F, 42, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
92 KB (94,208 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Dekart Private Disk

Command:
"C:\Program Files\dekart\private disk\prvdisk.exe" \scripC:"C:\Program Files\dekart\private disk\prvdisk.srt" \minimize


Scan PrvDisk.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.