EmptyFolderFinder.exe
- File Path:
C:\Program Files (x86)\Glary Utilities 5\EmptyFolderFinder.exe
- Description: EmptyFolderFinder
Screenshot
Hashes
Type |
Hash |
MD5 |
E414B13E5875190B056E237AAC6AA58B |
SHA1 |
45A8C24FDEAD9EB705507CD1A5CA016E609EFE56 |
SHA256 |
08A8472F3A5EF6A1C14ED314E174C6A369F9447E5E7CF3D9FA5E46E9FF91979A |
SHA384 |
8A107AFD4BF41D3CA4AA3671EBB2E0D065C699750E9A9805630FC0308CCBE05C6C8F58213A7C9941267324D0DCA75FF4 |
SHA512 |
0E5DD2B588DDFFB05849145B7901FF2C2B21A827CFBE5BC00C1B4FC359AE20F9CEFFC8333FD0CF425104D0E3594F37B46C58C9433811EBFAA4CE7F5A53894530 |
SSDEEP |
6144:Y9WQhfEyKOOYjDbyVziSso2lUtD4fiO9hqy:Y3fTKOO4/OiSso2caqy |
IMP |
13000D23CD20F6741CCC1409E86B44AF |
PESHA1 |
3E57A2A99A2888E101E37A1E4681DA859933DF48 |
PE256 |
A8F952F90EDF66B62A1BCB9A78B50C4E8FB5CF2ED0CE40DD3F3DCE6C95437356 |
Runtime Data
Child Processes:
MemfilesService.exe
Window Title:
Empty Folders Finder
Open Handles:
Path |
Type |
(R-D) C:\Windows\Fonts\StaticCache.dat |
File |
(R-D) C:\Windows\System32\en-US\windows.storage.dll.mui |
File |
(R-D) C:\Windows\SysWOW64\en-US\user32.dll.mui |
File |
(RW-) C:\Program Files (x86)\Glary Utilities 5 |
File |
(RW-) C:\Windows |
File |
(RW-) C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589 |
File |
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627 |
File |
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.508_none_429cdbca8a8ffa94 |
File |
(RW-) C:\xCyclopedia |
File |
(RWD) C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db |
File |
(RWD) C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db |
File |
\BaseNamedObjects__ComCatalogCache__ |
Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000003.db |
Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db |
Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 |
Section |
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 |
Section |
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 |
Section |
\BaseNamedObjects\windows_shell_global_counters |
Section |
\Sessions\1\BaseNamedObjects\windows_shell_global_counters |
Section |
\Sessions\1\Windows\Theme2547664911 |
Section |
\Windows\Theme3854699184 |
Section |
Loaded Modules:
Path |
C:\Program Files (x86)\Glary Utilities 5\EmptyFolderFinder.exe |
C:\Windows\SYSTEM32\ntdll.dll |
C:\Windows\System32\wow64.dll |
C:\Windows\System32\wow64cpu.dll |
C:\Windows\System32\wow64win.dll |
Signature
- Status: Signature verified.
- Serial:
0F05AE21CDC17B9F3CF09D7BFC659BA3
- Thumbprint:
362EBB303E088105BDCC07D94E6B7875D30C0D06
- Issuer: CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US
- Subject: CN=Glarysoft LTD, O=Glarysoft LTD, S=Beijing, C=CN
- Original Filename: EmptyFolderFinder.exe
- Product Name: Glary Utilities
- Company Name: Glarysoft Ltd
- File Version: 5.0.0.28
- Product Version: 5.0.0.28
- Language: Chinese (Simplified, China)
- Legal Copyright: Copyright (c) 2003-2020 Glarysoft Ltd
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 1/68
- VirusTotal Link: https://www.virustotal.com/gui/file/08a8472f3a5ef6a1c14ed314e174c6a369f9447e5e7cf3d9fa5e46e9ff91979a/detection/
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.