SpyRemover.exe
- File Path:
C:\Program Files (x86)\Glary Utilities 5\SpyRemover.exe
- Description: Glary Utilities SpyRemover
Screenshot
Hashes
Type |
Hash |
MD5 |
9F02F3CD1EE1E26FC53115E0E7089BDD |
SHA1 |
0DD15B759D0CA3A9DD982A8D6BEA07E99A8A58F8 |
SHA256 |
BEE84C99D37B83F5145DC9E145999CDA5D52C4081DFF1B55290DAAE95E639253 |
SHA384 |
B4C2A3C1AD2DE668BCA983E7EF09FAEDD5BE6ED993909316B9CD12865538276C1EEA041CF41BA8486DD99381DB15CE10 |
SHA512 |
84595933787A44673193F1A3D820B86F5E03FE341082C33049527457D105FD7C4BD0290DEB70B0B26B1D64BFAD6C554F48B1606F4D82235C07A7C946D4E7C7DF |
SSDEEP |
768:SPgex7DOKjVVVVVVVVkZIOzYzz+zz4zzzszzz3zzzTZzzzjzzzzfzzzzgzzzzPz+:ygedOKjVVVVVVVVkZIOzYzz+zz4zzzsx |
IMP |
7D479FDC07A158DCE51FEC12A1A2D29A |
PESHA1 |
F764E07AAA867B6AF4E1D4D0165957C1839B0D73 |
PE256 |
0C84AD74CA191CFAD01DA3533A6F84E889D8F490A2DF9F64536F1E4FEF1BA1DE |
Runtime Data
Window Title:
Malware Remover
Open Handles:
Path |
Type |
(R-D) C:\Windows\Fonts\StaticCache.dat |
File |
(R-D) C:\Windows\SysWOW64\en-US\user32.dll.mui |
File |
(RW-) C:\Program Files (x86)\Glary Utilities 5 |
File |
(RW-) C:\Windows |
File |
(RW-) C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589 |
File |
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627 |
File |
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.508_none_429cdbca8a8ffa94 |
File |
(RW-) C:\xCyclopedia |
File |
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 |
Section |
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 |
Section |
\Sessions\1\Windows\Theme2547664911 |
Section |
\Windows\Theme3854699184 |
Section |
Loaded Modules:
Path |
C:\Program Files (x86)\Glary Utilities 5\SpyRemover.exe |
C:\Windows\SYSTEM32\ntdll.dll |
C:\Windows\System32\wow64.dll |
C:\Windows\System32\wow64cpu.dll |
C:\Windows\System32\wow64win.dll |
Signature
- Status: Signature verified.
- Serial:
0F05AE21CDC17B9F3CF09D7BFC659BA3
- Thumbprint:
362EBB303E088105BDCC07D94E6B7875D30C0D06
- Issuer: CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US
- Subject: CN=Glarysoft LTD, O=Glarysoft LTD, S=Beijing, C=CN
- Original Filename: SpyRemover.exe
- Product Name: Glary Utilities
- Company Name: Glarysoft Ltd
- File Version: 5.0.0.5
- Product Version: 5.0.0.1
- Language: Chinese (Simplified, China)
- Legal Copyright: Copyright (c) 2003-2020 Glarysoft Ltd
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/68
- VirusTotal Link: https://www.virustotal.com/gui/file/bee84c99d37b83f5145dc9e145999cda5d52c4081dff1b55290daae95e639253/detection/
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.