SDFiles.exe
- File Path:
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFiles.exe
- Description: Single file on-demand scanner
Screenshot
Hashes
Type |
Hash |
MD5 |
D4973562BFA8E178EF72A8816C1C5557 |
SHA1 |
57EB5199A444812C373FFB99B6FE9EFFEB851D48 |
SHA256 |
677D05FE2862175890C4A185485394E2BAC3E96867547DE54693CFB498D424CA |
SHA384 |
3856723E1929E88D4B9764B8DD6E2C90C48EC18345D8973795B3F16138FEE9C11EF9A5B1C7AA1F17417AE27593E40073 |
SHA512 |
4A70FAFBBC1E405EC325008C4B52583723FBD3DFCBA10331F4053F3A68F8C365E57181E0EB290F7FA9CFDC20901EBB7F165A0CE8DC66BE877B454D00394091DE |
SSDEEP |
98304:2fwuARnb7G7MdhyQm+nXO3kHQnIW0olmNRlYzGVQZNjAL5/iqt2qvLRww:lb7GgNS0H+0olmNfYziQMZMMT |
IMP |
F944C12D480CB9EA1CF81BADB6F84353 |
PESHA1 |
54FDF411E6473150FC037A683305C8A78C915D62 |
PE256 |
D683F18CB56B975647E5D08BBDA4BF0BC7C98A7056BE37B7EB9647E0C89A3697 |
Runtime Data
Window Title:
File Scan (Spybot - Search & Destroy 2.7, administrator privileges)
Open Handles:
Path |
Type |
(R-D) C:\Windows\Fonts\StaticCache.dat |
File |
(R-D) C:\Windows\System32\en-US\crypt32.dll.mui |
File |
(R-D) C:\Windows\System32\en-US\KernelBase.dll.mui |
File |
(R-D) C:\Windows\SysWOW64\en-US\user32.dll.mui |
File |
(R-D) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.19041.1_en-us_130e63d987a738df\comctl32.dll.mui |
File |
(RW-) C:\Windows |
File |
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.19041.1_en-us_130e63d987a738df |
File |
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627 |
File |
(RW-) C:\xCyclopedia |
File |
(RWD) C:\Users\user\AppData\Roaming\Microsoft\SystemCertificates\My |
File |
\BaseNamedObjects__ComCatalogCache__ |
Section |
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 |
Section |
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 |
Section |
\BaseNamedObjects\windows_shell_global_counters |
Section |
\Sessions\1\BaseNamedObjects\windows_shell_global_counters |
Section |
\Sessions\1\BaseNamedObjects\windows_webcache_counters_{9B6AB5B3-91BC-4097-835C-EA2DEC95E9CC}_S-1-5-21-2047949552-857980807-821054962-504 |
Section |
\Sessions\1\Windows\Theme2547664911 |
Section |
\Windows\Theme3854699184 |
Section |
Loaded Modules:
Path |
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFiles.exe |
C:\Windows\SYSTEM32\ntdll.dll |
C:\Windows\System32\wow64.dll |
C:\Windows\System32\wow64cpu.dll |
C:\Windows\System32\wow64win.dll |
Signature
- Status: Signature verified.
- Serial:
0B3FD32E39B247B09C8040571D6AD2F3
- Thumbprint:
9A32249E9A6B9CF5C36B0749C81613524D37C594
- Issuer: CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US
- Subject: CN=Safer-Networking Ltd., O=Safer-Networking Ltd., L=Greystones, S=County Wicklow, C=IE, STREET=Unit 5 Watson & Johnson Centre, SERIALNUMBER=377893, OID.1.3.6.1.4.1.311.60.2.1.3=IE, OID.2.5.4.15=Private Organization
- Original Filename: SDFiles.exe
- Product Name: Spybot - Search & Destroy
- Company Name: Safer-Networking Ltd.
- File Version: 2.7.64.137
- Product Version: 2.7.64.0
- Language: English (Ireland)
- Legal Copyright: 2000-2018 Safer-Networking Ltd. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/72
- VirusTotal Link: https://www.virustotal.com/gui/file/677d05fe2862175890c4a185485394e2bac3e96867547de54693cfb498d424ca/detection/
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.