SpyRemover.exe
- File Path:
C:\Program Files (x86)\Glary Utilities 5\SpyRemover.exe - Description: Glary Utilities SpyRemover
Screenshot

Hashes
| Type | Hash |
|---|---|
| MD5 | 9F02F3CD1EE1E26FC53115E0E7089BDD |
| SHA1 | 0DD15B759D0CA3A9DD982A8D6BEA07E99A8A58F8 |
| SHA256 | BEE84C99D37B83F5145DC9E145999CDA5D52C4081DFF1B55290DAAE95E639253 |
| SHA384 | B4C2A3C1AD2DE668BCA983E7EF09FAEDD5BE6ED993909316B9CD12865538276C1EEA041CF41BA8486DD99381DB15CE10 |
| SHA512 | 84595933787A44673193F1A3D820B86F5E03FE341082C33049527457D105FD7C4BD0290DEB70B0B26B1D64BFAD6C554F48B1606F4D82235C07A7C946D4E7C7DF |
| SSDEEP | 768:SPgex7DOKjVVVVVVVVkZIOzYzz+zz4zzzszzz3zzzTZzzzjzzzzfzzzzgzzzzPz+:ygedOKjVVVVVVVVkZIOzYzz+zz4zzzsx |
| IMP | 7D479FDC07A158DCE51FEC12A1A2D29A |
| PESHA1 | F764E07AAA867B6AF4E1D4D0165957C1839B0D73 |
| PE256 | 0C84AD74CA191CFAD01DA3533A6F84E889D8F490A2DF9F64536F1E4FEF1BA1DE |
Runtime Data
Window Title:
Malware Remover
Open Handles:
| Path | Type |
|---|---|
| (R-D) C:\Windows\Fonts\StaticCache.dat | File |
| (R-D) C:\Windows\SysWOW64\en-US\user32.dll.mui | File |
| (RW-) C:\Program Files (x86)\Glary Utilities 5 | File |
| (RW-) C:\Windows | File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589 | File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627 | File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.508_none_429cdbca8a8ffa94 | File |
| (RW-) C:\xCyclopedia | File |
| \BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 | Section |
| \BaseNamedObjects\NLS_CodePage_437_3_2_0_0 | Section |
| \Sessions\1\Windows\Theme2547664911 | Section |
| \Windows\Theme3854699184 | Section |
Loaded Modules:
| Path |
|---|
| C:\Program Files (x86)\Glary Utilities 5\SpyRemover.exe |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\wow64.dll |
| C:\Windows\System32\wow64cpu.dll |
| C:\Windows\System32\wow64win.dll |
Signature
- Status: Signature verified.
- Serial:
0F05AE21CDC17B9F3CF09D7BFC659BA3 - Thumbprint:
362EBB303E088105BDCC07D94E6B7875D30C0D06 - Issuer: CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US
- Subject: CN=Glarysoft LTD, O=Glarysoft LTD, S=Beijing, C=CN
File Metadata
- Original Filename: SpyRemover.exe
- Product Name: Glary Utilities
- Company Name: Glarysoft Ltd
- File Version: 5.0.0.5
- Product Version: 5.0.0.1
- Language: Chinese (Simplified, China)
- Legal Copyright: Copyright (c) 2003-2020 Glarysoft Ltd
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/68
- VirusTotal Link: https://www.virustotal.com/gui/file/bee84c99d37b83f5145dc9e145999cda5d52c4081dff1b55290daae95e639253/detection/
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.