FileUndelete.exe

  • File Path: C:\Program Files (x86)\Glary Utilities 5\FileUndelete.exe
  • Description: Glary Utilities FileUndelete

Screenshot

FileUndelete.exe

Hashes

Type Hash
MD5 D5DB4E8BCDEC47FA1BB38EE5CD8DBE08
SHA1 8B74C4FB2EB5FC9C24658C020D189E570B73A947
SHA256 B4D78E614B98A589686A2FC6D5228891505A5E1F47B675DB3633E90DBC3EAFFD
SHA384 4166A93CC49FC8C06B1713F27F1EE7D276FE53EA7A93EFA3454CA30EDEAE0C9C04B99B5F19EEDC5374A0DF64FD8C8FBF
SHA512 18E6A9EB0629D8C9645CBA09B3909DBF5E146586158999B9809CCA7E05EDAC92DF8C04166863B7C7DA531A466DE16DA59D04F9C918D3164D5ED9DECB988BB401
SSDEEP 24576:7h1E/T5FFUsPOVIBkMt577B/tgl6nRbBrIvUVQnGLfiT4xzN8:lEHFpDE6JRz2TYy
IMP 9DE4CD719FA6E8E17EF36EBB330F2DF3
PESHA1 7FA7A6D2CC19ECFF9E4AA967AA92F7F2AD5C1708
PE256 84BB84558EBF91C50123A17A17BE5849C3EEFAC324F04368985BED0E4D3A7E4B

Runtime Data

Window Title:

File Undelete

Open Handles:

Path Type
(R-D) C:\Windows\Fonts\StaticCache.dat File
(R-D) C:\Windows\SysWOW64\en-US\user32.dll.mui File
(RW-) C:\Program Files (x86)\Glary Utilities 5 File
(RW-) C:\Windows File
(RW-) C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589 File
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627 File
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.508_none_429cdbca8a8ffa94 File
(RW-) C:\xCyclopedia File
(RWD) C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db File
(RWD) C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db File
\BaseNamedObjects__ComCatalogCache__ Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000003.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\BaseNamedObjects\windows_shell_global_counters Section
\Sessions\1\BaseNamedObjects\windows_shell_global_counters Section
\Sessions\1\Windows\Theme2547664911 Section
\Windows\Theme3854699184 Section

Loaded Modules:

Path
C:\Program Files (x86)\Glary Utilities 5\FileUndelete.exe
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll

Signature

  • Status: Signature verified.
  • Serial: 0F05AE21CDC17B9F3CF09D7BFC659BA3
  • Thumbprint: 362EBB303E088105BDCC07D94E6B7875D30C0D06
  • Issuer: CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US
  • Subject: CN=Glarysoft LTD, O=Glarysoft LTD, S=Beijing, C=CN

File Metadata

  • Original Filename: FileUndelete.exe
  • Product Name: Glary Utilities
  • Company Name: Glarysoft Ltd
  • File Version: 5.0.0.23
  • Product Version: 5.0.0.1
  • Language: Chinese (Simplified, China)
  • Legal Copyright: Copyright (c) 2003-2020 Glarysoft Ltd
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 1/66
  • VirusTotal Link: https://www.virustotal.com/gui/file/b4d78e614b98a589686a2fc6d5228891505a5e1f47b675db3633e90dbc3eaffd/detection/

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Glary Utilities 5\FileUndelete.exe 97
C:\program files (x86)\Glary Utilities 5\FileUndelete.exe 97

MIT License. Copyright (c) 2020-2021 Strontic.