SDHelp.exe
- File Path:
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelp.exe - Description: Spybot Help (Window Title)
Screenshot

Hashes
| Type | Hash |
|---|---|
| MD5 | D1B3480B016A952C6A7C683E453B3C7C |
| SHA1 | 0761EC4C1FFD2B18D716C69620A3953B3674D8E7 |
| SHA256 | 4EC1BA378384E0ED928C4B4EACA9AD1BE97F459F3288826AA8D76F5352637E33 |
| SHA384 | DD76A1F25F76BA59F3BC7505E39E67B9EB878BF2A734BF7CD9E6C16B71F5E82D8DC5BE0B79DB0C4E64F004B2BAE5D1F8 |
| SHA512 | 70492314ED44EFDBE374C103B9554D1B3945DDA818968C71A53AD1D47B9BB059DE1E7CD5DF3853CC6D64A270620AB01291DCFDD205C28F285101634272A3AEE1 |
| SSDEEP | 98304:K1q5kaMYHxn1NM8ejPyxKbECXI7y5TE9eCmEjAL5/iqt2hj:/1NML+42QTE9uDZM9 |
| IMP | D2432594CA29515C70E34D79AD7C344F |
| PESHA1 | 2507A921A48E07A177F0AE0CA3E6975BCA8AC134 |
| PE256 | BAC9CAC11FA17699491F11AD20B3A564AD9E3C2D87B7E3728A0AF2D56357B924 |
Runtime Data
Window Title:
Spybot Help
Open Handles:
| Path | Type |
|---|---|
| (R–) C:\Program Files (x86)\Spybot - Search & Destroy 2\Help\Spybot2.chm | File |
| (R–) C:\Users\user\AppData\Local\Temp\pngCE5E.tmp | File |
| (R–) C:\Users\user\AppData\Local\Temp\pngCE5F.tmp | File |
| (R-D) C:\Windows\Fonts\StaticCache.dat | File |
| (R-D) C:\Windows\System32\en-US\crypt32.dll.mui | File |
| (R-D) C:\Windows\System32\en-US\KernelBase.dll.mui | File |
| (R-D) C:\Windows\SysWOW64\en-US\user32.dll.mui | File |
| (R-D) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.19041.1_en-us_130e63d987a738df\comctl32.dll.mui | File |
| (RW-) C:\Windows | File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.19041.1_en-us_130e63d987a738df | File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627 | File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.508_none_429cdbca8a8ffa94 | File |
| (RW-) C:\xCyclopedia | File |
| (RWD) C:\Users\user\AppData\Roaming\Microsoft\SystemCertificates\My | File |
| \BaseNamedObjects__ComCatalogCache__ | Section |
| \BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 | Section |
| \BaseNamedObjects\NLS_CodePage_437_3_2_0_0 | Section |
| \BaseNamedObjects\windows_shell_global_counters | Section |
| \Sessions\1\BaseNamedObjects\windows_shell_global_counters | Section |
| \Sessions\1\BaseNamedObjects\windows_webcache_counters_{9B6AB5B3-91BC-4097-835C-EA2DEC95E9CC}_S-1-5-21-2047949552-857980807-821054962-504 | Section |
| \Sessions\1\Windows\Theme2547664911 | Section |
| \Windows\Theme3854699184 | Section |
Loaded Modules:
| Path |
|---|
| C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelp.exe |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\wow64.dll |
| C:\Windows\System32\wow64cpu.dll |
| C:\Windows\System32\wow64win.dll |
Signature
- Status: Signature verified.
- Serial:
0B3FD32E39B247B09C8040571D6AD2F3 - Thumbprint:
9A32249E9A6B9CF5C36B0749C81613524D37C594 - Issuer: CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US
- Subject: CN=Safer-Networking Ltd., O=Safer-Networking Ltd., L=Greystones, S=County Wicklow, C=IE, STREET=Unit 5 Watson & Johnson Centre, SERIALNUMBER=377893, OID.1.3.6.1.4.1.311.60.2.1.3=IE, OID.2.5.4.15=Private Organization
File Metadata
- Original Filename:
- Product Name: Spybot - Search & Destroy
- Company Name: Safer-Networking Ltd.
- File Version: 2.7.64.1
- Product Version: 2.7.64.0
- Language: English (United States)
- Legal Copyright: 2010-2018 Safer-Networking Ltd. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/68
- VirusTotal Link: https://www.virustotal.com/gui/file/4ec1ba378384e0ed928c4b4eaca9ad1be97f459f3288826aa8d76f5352637e33/detection/
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.