SDHelp.exe
- File Path:
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelp.exe
- Description: Spybot Help (Window Title)
Screenshot
Hashes
Type | Hash |
---|---|
MD5 | D1B3480B016A952C6A7C683E453B3C7C |
SHA1 | 0761EC4C1FFD2B18D716C69620A3953B3674D8E7 |
SHA256 | 4EC1BA378384E0ED928C4B4EACA9AD1BE97F459F3288826AA8D76F5352637E33 |
SHA384 | DD76A1F25F76BA59F3BC7505E39E67B9EB878BF2A734BF7CD9E6C16B71F5E82D8DC5BE0B79DB0C4E64F004B2BAE5D1F8 |
SHA512 | 70492314ED44EFDBE374C103B9554D1B3945DDA818968C71A53AD1D47B9BB059DE1E7CD5DF3853CC6D64A270620AB01291DCFDD205C28F285101634272A3AEE1 |
SSDEEP | 98304:K1q5kaMYHxn1NM8ejPyxKbECXI7y5TE9eCmEjAL5/iqt2hj:/1NML+42QTE9uDZM9 |
IMP | D2432594CA29515C70E34D79AD7C344F |
PESHA1 | 2507A921A48E07A177F0AE0CA3E6975BCA8AC134 |
PE256 | BAC9CAC11FA17699491F11AD20B3A564AD9E3C2D87B7E3728A0AF2D56357B924 |
Runtime Data
Window Title:
Spybot Help
Open Handles:
Path | Type |
---|---|
(R–) C:\Program Files (x86)\Spybot - Search & Destroy 2\Help\Spybot2.chm | File |
(R–) C:\Users\user\AppData\Local\Temp\pngCE5E.tmp | File |
(R–) C:\Users\user\AppData\Local\Temp\pngCE5F.tmp | File |
(R-D) C:\Windows\Fonts\StaticCache.dat | File |
(R-D) C:\Windows\System32\en-US\crypt32.dll.mui | File |
(R-D) C:\Windows\System32\en-US\KernelBase.dll.mui | File |
(R-D) C:\Windows\SysWOW64\en-US\user32.dll.mui | File |
(R-D) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.19041.1_en-us_130e63d987a738df\comctl32.dll.mui | File |
(RW-) C:\Windows | File |
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.19041.1_en-us_130e63d987a738df | File |
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627 | File |
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.508_none_429cdbca8a8ffa94 | File |
(RW-) C:\xCyclopedia | File |
(RWD) C:\Users\user\AppData\Roaming\Microsoft\SystemCertificates\My | File |
\BaseNamedObjects__ComCatalogCache__ | Section |
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 | Section |
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 | Section |
\BaseNamedObjects\windows_shell_global_counters | Section |
\Sessions\1\BaseNamedObjects\windows_shell_global_counters | Section |
\Sessions\1\BaseNamedObjects\windows_webcache_counters_{9B6AB5B3-91BC-4097-835C-EA2DEC95E9CC}_S-1-5-21-2047949552-857980807-821054962-504 | Section |
\Sessions\1\Windows\Theme2547664911 | Section |
\Windows\Theme3854699184 | Section |
Loaded Modules:
Path |
---|
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelp.exe |
C:\Windows\SYSTEM32\ntdll.dll |
C:\Windows\System32\wow64.dll |
C:\Windows\System32\wow64cpu.dll |
C:\Windows\System32\wow64win.dll |
Signature
- Status: Signature verified.
- Serial:
0B3FD32E39B247B09C8040571D6AD2F3
- Thumbprint:
9A32249E9A6B9CF5C36B0749C81613524D37C594
- Issuer: CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US
- Subject: CN=Safer-Networking Ltd., O=Safer-Networking Ltd., L=Greystones, S=County Wicklow, C=IE, STREET=Unit 5 Watson & Johnson Centre, SERIALNUMBER=377893, OID.1.3.6.1.4.1.311.60.2.1.3=IE, OID.2.5.4.15=Private Organization
File Metadata
- Original Filename:
- Product Name: Spybot - Search & Destroy
- Company Name: Safer-Networking Ltd.
- File Version: 2.7.64.1
- Product Version: 2.7.64.0
- Language: English (United States)
- Legal Copyright: 2010-2018 Safer-Networking Ltd. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/68
- VirusTotal Link: https://www.virustotal.com/gui/file/4ec1ba378384e0ed928c4b4eaca9ad1be97f459f3288826aa8d76f5352637e33/detection/
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.