home

vDiskUI.exe

Disk Master

qiong liu

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Disk Master Free’.
Publisher:
DAYU Technology Co., Ltd.  (signed by qiong liu)

Product:
Disk Master

Description:
Disk Master Application

Version:
1, 0, 0, 1

MD5:
3bd21b3c5ce0dd4315f962273ff9f3d0

SHA-1:
61cca065a18c931e4c1b1e017059e267f63f6897

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:54:32 PM UTC  (today)

File size:
824.7 KB (844,520 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright (C) 2013 DAYU Technology Co., Ltd. All rights reserved.

Original file name:
vDiskUI.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\dayu\disk master free\vdiskui.exe

Digital Signature
Signed by:
qiong liu

Authority:
VeriSign, Inc.

Valid from:
6/28/2013 2:00:00 AM

Valid to:
6/29/2014 1:59:59 AM

Subject:
CN=qiong liu, OU=Individual Developer, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=No Organization Affiliation, L=Chengdu, S=Sichuan, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0F99A47F21F281F77AC0A1D2193EB44A

File PE Metadata
Compilation timestamp:
10/7/2013 6:14:12 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:FegGYN0z95qJ3CFrnhEWTR7Pf3uTqvfaoKnDxGfvpp0IzIVpvd8WK:SN95qRCPTRPPksIavbklxK

Entry address:
0x55A81

Entry point:
E8, 92, 04, 00, 00, E9, 37, FD, FF, FF, CC, FF, 25, BC, A3, 45, 00, FF, 25, 18, A3, 45, 00, FF, 25, 1C, A3, 45, 00, FF, 25, 20, A3, 45, 00, FF, 25, 24, A3, 45, 00, CC, CC, 68, 5C, 56, 45, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 9C, 18, 47, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B...
 
[+]

Code size:
352.5 KB (360,960 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Disk Master Free

Command:
C:\Program Files\dayu\disk master free\vdiskui.exe -hide


Scan vDiskUI.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.