SDTray.exe
- File Path:
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
- Description: Spybot - Search & Destroy tray access
Hashes
Type | Hash |
---|---|
MD5 | 06B43CB00B61BE55B6D100B15EDFBC39 |
SHA1 | ECEBF606281680A05DD11B4EDE1ECE5E0A229E96 |
SHA256 | AE6BA7C0A7E10E2197CF21C5BA98630A14C366D0D3402EEA0FEB42B6AAD3827B |
SHA384 | 976EA7CA7674BD1F70DBD55B59B75D3F6F21C1EB86FBBDDA256934BCF87F6E50B71222AACFD8DCD79C8FC1741333425F |
SHA512 | 5EAFAAF42F98F7C04997E7C49A54D7C64415D4E38978A6DB293AEDFCCE1C20BC1AD6712A7FFD37AAF23D1B65BFDD012256F6B0B9047D6A7C293C3AD6DE43BE7B |
SSDEEP | 98304:V3WSuEtdpAf8CD/JUHCphaCpJTOKjAL5/iqt2s7e:xWDRfJJUHCCCpmZMx |
IMP | 228EF75EC332AFAC5575F3BED0A68FB1 |
PESHA1 | 62F8ABD1FE48D629BAC9FCA3363BE89F5437FEAA |
PE256 | E6CDB8E3B698256CEB47686FB078DE966833D280024F139B51A4992E5EEC9ABC |
Runtime Data
Open Handles:
Path | Type |
---|---|
(R-D) C:\Windows\Fonts\StaticCache.dat | File |
(R-D) C:\Windows\System32\en-US\crypt32.dll.mui | File |
(R-D) C:\Windows\System32\en-US\KernelBase.dll.mui | File |
(R-D) C:\Windows\SysWOW64\en-US\user32.dll.mui | File |
(R-D) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.19041.1_en-us_130e63d987a738df\comctl32.dll.mui | File |
(RW-) C:\Windows | File |
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.19041.1_en-us_130e63d987a738df | File |
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627 | File |
(RW-) C:\xCyclopedia | File |
(RWD) C:\Users\user\AppData\Roaming\Microsoft\SystemCertificates\My | File |
\BaseNamedObjects__ComCatalogCache__ | Section |
\BaseNamedObjects\MMF.AlivePing.HTTPService.TNotificationWebDaemon | Section |
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 | Section |
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 | Section |
\BaseNamedObjects\windows_shell_global_counters | Section |
\Sessions\1\BaseNamedObjects\windows_shell_global_counters | Section |
\Sessions\1\BaseNamedObjects\windows_webcache_counters_{9B6AB5B3-91BC-4097-835C-EA2DEC95E9CC}_S-1-5-21-2047949552-857980807-821054962-504 | Section |
\Sessions\1\Windows\Theme2547664911 | Section |
\Windows\Theme3854699184 | Section |
Loaded Modules:
Path |
---|
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe |
C:\Windows\SYSTEM32\ntdll.dll |
C:\Windows\System32\wow64.dll |
C:\Windows\System32\wow64cpu.dll |
C:\Windows\System32\wow64win.dll |
Signature
- Status: Signature verified.
- Serial:
0B3FD32E39B247B09C8040571D6AD2F3
- Thumbprint:
9A32249E9A6B9CF5C36B0749C81613524D37C594
- Issuer: CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US
- Subject: CN=Safer-Networking Ltd., O=Safer-Networking Ltd., L=Greystones, S=County Wicklow, C=IE, STREET=Unit 5 Watson & Johnson Centre, SERIALNUMBER=377893, OID.1.3.6.1.4.1.311.60.2.1.3=IE, OID.2.5.4.15=Private Organization
File Metadata
- Original Filename: SDTray.exe
- Product Name: Spybot - Search & Destroy
- Company Name: Safer-Networking Ltd.
- File Version: 2.7.64.129
- Product Version: 2.7.64.0
- Language: English (Ireland)
- Legal Copyright: 2009-2018 Safer-Networking Ltd. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/73
- VirusTotal Link: https://www.virustotal.com/gui/file/ae6ba7c0a7e10e2197cf21c5ba98630a14c366d0d3402eea0feb42b6aad3827b/detection/
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.