SDFiles.exe
- File Path:
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFiles.exe - Description: Single file on-demand scanner
Screenshot

Hashes
| Type | Hash |
|---|---|
| MD5 | D4973562BFA8E178EF72A8816C1C5557 |
| SHA1 | 57EB5199A444812C373FFB99B6FE9EFFEB851D48 |
| SHA256 | 677D05FE2862175890C4A185485394E2BAC3E96867547DE54693CFB498D424CA |
| SHA384 | 3856723E1929E88D4B9764B8DD6E2C90C48EC18345D8973795B3F16138FEE9C11EF9A5B1C7AA1F17417AE27593E40073 |
| SHA512 | 4A70FAFBBC1E405EC325008C4B52583723FBD3DFCBA10331F4053F3A68F8C365E57181E0EB290F7FA9CFDC20901EBB7F165A0CE8DC66BE877B454D00394091DE |
| SSDEEP | 98304:2fwuARnb7G7MdhyQm+nXO3kHQnIW0olmNRlYzGVQZNjAL5/iqt2qvLRww:lb7GgNS0H+0olmNfYziQMZMMT |
| IMP | F944C12D480CB9EA1CF81BADB6F84353 |
| PESHA1 | 54FDF411E6473150FC037A683305C8A78C915D62 |
| PE256 | D683F18CB56B975647E5D08BBDA4BF0BC7C98A7056BE37B7EB9647E0C89A3697 |
Runtime Data
Window Title:
File Scan (Spybot - Search & Destroy 2.7, administrator privileges)
Open Handles:
| Path | Type |
|---|---|
| (R-D) C:\Windows\Fonts\StaticCache.dat | File |
| (R-D) C:\Windows\System32\en-US\crypt32.dll.mui | File |
| (R-D) C:\Windows\System32\en-US\KernelBase.dll.mui | File |
| (R-D) C:\Windows\SysWOW64\en-US\user32.dll.mui | File |
| (R-D) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.19041.1_en-us_130e63d987a738df\comctl32.dll.mui | File |
| (RW-) C:\Windows | File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.19041.1_en-us_130e63d987a738df | File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627 | File |
| (RW-) C:\xCyclopedia | File |
| (RWD) C:\Users\user\AppData\Roaming\Microsoft\SystemCertificates\My | File |
| \BaseNamedObjects__ComCatalogCache__ | Section |
| \BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 | Section |
| \BaseNamedObjects\NLS_CodePage_437_3_2_0_0 | Section |
| \BaseNamedObjects\windows_shell_global_counters | Section |
| \Sessions\1\BaseNamedObjects\windows_shell_global_counters | Section |
| \Sessions\1\BaseNamedObjects\windows_webcache_counters_{9B6AB5B3-91BC-4097-835C-EA2DEC95E9CC}_S-1-5-21-2047949552-857980807-821054962-504 | Section |
| \Sessions\1\Windows\Theme2547664911 | Section |
| \Windows\Theme3854699184 | Section |
Loaded Modules:
| Path |
|---|
| C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFiles.exe |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\wow64.dll |
| C:\Windows\System32\wow64cpu.dll |
| C:\Windows\System32\wow64win.dll |
Signature
- Status: Signature verified.
- Serial:
0B3FD32E39B247B09C8040571D6AD2F3 - Thumbprint:
9A32249E9A6B9CF5C36B0749C81613524D37C594 - Issuer: CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US
- Subject: CN=Safer-Networking Ltd., O=Safer-Networking Ltd., L=Greystones, S=County Wicklow, C=IE, STREET=Unit 5 Watson & Johnson Centre, SERIALNUMBER=377893, OID.1.3.6.1.4.1.311.60.2.1.3=IE, OID.2.5.4.15=Private Organization
File Metadata
- Original Filename: SDFiles.exe
- Product Name: Spybot - Search & Destroy
- Company Name: Safer-Networking Ltd.
- File Version: 2.7.64.137
- Product Version: 2.7.64.0
- Language: English (Ireland)
- Legal Copyright: 2000-2018 Safer-Networking Ltd. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/72
- VirusTotal Link: https://www.virustotal.com/gui/file/677d05fe2862175890c4a185485394e2bac3e96867547de54693cfb498d424ca/detection/
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.