SDCleaner.exe
- File Path:
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe - Description: Search results cleaner
Screenshot

Hashes
| Type | Hash |
|---|---|
| MD5 | 0FDE330837830102673073FA4C5EEAD7 |
| SHA1 | 3B2C41073D1632706CF7CDAEAC98E9636E3D321D |
| SHA256 | 7C171704A89F00CAAADA1C491EEFCA738351734E8FCF93E4F8444E55B4CA2EC4 |
| SHA384 | 6D661162D0EE944A99A04B39A2CA21B479C57001CFDEE9C92A83A043D1A8BB180FEB0573E93FF825CB1A7FA00ADECC6B |
| SHA512 | F3FD0F3CC831BD22FBBB7A854E2D94DCD68565F621CE5CCA603A5AE892A2FC84446726E26760BAB72A6A788643D5873A56AB253BB17F532138AE415A1FAE185B |
| SSDEEP | 98304:tYv7rtrD/bewwNNG/sroHCIq086A4fB3t1TjAL5/iqt2n6:Er/oq3RA6B3t1oZM6 |
| IMP | 7E520D75455726CD02F3C153230CB8B2 |
| PESHA1 | 8E332FC02A211729F2AC07039884FBDB9B64B938 |
| PE256 | E654329F0E1EA6B0FEF7F3CC9FCC8289600D8D6B59B9545EF133F86E03151775 |
Runtime Data
Window Title:
Cleaner (Spybot - Search & Destroy 2.7, administrator privileges)
Open Handles:
| Path | Type |
|---|---|
| (R-D) C:\Windows\Fonts\StaticCache.dat | File |
| (R-D) C:\Windows\System32\en-US\crypt32.dll.mui | File |
| (R-D) C:\Windows\System32\en-US\KernelBase.dll.mui | File |
| (R-D) C:\Windows\SysWOW64\en-US\user32.dll.mui | File |
| (R-D) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.19041.1_en-us_130e63d987a738df\comctl32.dll.mui | File |
| (RW-) C:\Windows | File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.19041.1_en-us_130e63d987a738df | File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627 | File |
| (RW-) C:\xCyclopedia | File |
| (RWD) C:\Users\user\AppData\Roaming\Microsoft\SystemCertificates\My | File |
| \BaseNamedObjects__ComCatalogCache__ | Section |
| \BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 | Section |
| \BaseNamedObjects\NLS_CodePage_437_3_2_0_0 | Section |
| \BaseNamedObjects\windows_shell_global_counters | Section |
| \Sessions\1\BaseNamedObjects\windows_shell_global_counters | Section |
| \Sessions\1\BaseNamedObjects\windows_webcache_counters_{9B6AB5B3-91BC-4097-835C-EA2DEC95E9CC}_S-1-5-21-2047949552-857980807-821054962-504 | Section |
| \Sessions\1\Windows\Theme2547664911 | Section |
| \Windows\Theme3854699184 | Section |
Loaded Modules:
| Path |
|---|
| C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\wow64.dll |
| C:\Windows\System32\wow64cpu.dll |
| C:\Windows\System32\wow64win.dll |
Signature
- Status: Signature verified.
- Serial:
0B3FD32E39B247B09C8040571D6AD2F3 - Thumbprint:
9A32249E9A6B9CF5C36B0749C81613524D37C594 - Issuer: CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US
- Subject: CN=Safer-Networking Ltd., O=Safer-Networking Ltd., L=Greystones, S=County Wicklow, C=IE, STREET=Unit 5 Watson & Johnson Centre, SERIALNUMBER=377893, OID.1.3.6.1.4.1.311.60.2.1.3=IE, OID.2.5.4.15=Private Organization
File Metadata
- Original Filename: SDCleaner.exe
- Product Name: Spybot - Search & Destroy
- Company Name: Safer-Networking Ltd.
- File Version: 2.7.64.110
- Product Version: 2.7.64.0
- Language: English (Ireland)
- Legal Copyright: 2000-2018 Safer-Networking Ltd. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/69
- VirusTotal Link: https://www.virustotal.com/gui/file/7c171704a89f00caaada1c491eefca738351734e8fcf93e4f8444e55b4ca2ec4/detection/
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.