» SDQuarantine.exe
Overview
Analysis
File Details
Programs (1)

SDQuarantine.exe

Spybot - Search & Destroy

Safer Networking Ltd.

This is installed with Spybot - Search & Destroy 2.

File name:

SDQuarantine.exe

Publisher:

Safer-Networking Ltd. (signed by Safer Networking Ltd.)

Product:

Spybot - Search & Destroy

Description:

Allows to restore cleaned files.

Version:

2.0.4.102

MD5:

4d51e5c9f5d7519e1220cada23486da1

SHA-1:

d51b78e0afee08b11502331a6a810e82e67f8614

SHA-256:

10a206fbffa12c134d23ac8afc2a8086c9a76b669e8d14423713ff39b3661cbf

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 9:07:33 AM UTC (today)

File size:

1.8 MB (1,841,056 bytes)

Product version:

2.0.3.0

Trademarks:

Spybot® and Spybot - Search & Destroy® are registered trademarks.

Original file name:

SDQuarantine.exe

File type:

Executable application (Win32 EXE)

Language:

English (Ireland)

Common path:

C:\Program Files\spybot - search & destroy 2\sdquarantine.exe

Digital Signature

Signed by:

Safer Networking Ltd.

Authority:

VeriSign, Inc.

Valid from:

3/30/2009 5:00:00 PM

Valid to:

4/7/2012 4:59:59 PM

Subject:

CN=Safer Networking Ltd., OU=Security Solutions, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Safer Networking Ltd., L=Greystones, S=County Wicklow, C=IE

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

1E9298A426D948125BC1ACF39622D735

File PE Metadata

Compilation timestamp:

7/6/2011 2:21:00 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:vqgjataoFqdjljuyxu8IDm3J3PUKWnnEwIgcK2:vqgjaIoFqdjlM8IDm5cjnE7gcK2

Entry address:

0x12BD68

Entry point:

55, 8B, EC, 83, C4, E8, 33, C0, 89, 45, EC, 89, 45, E8, B8, 70, 92, 51, 30, E8, 6C, 59, ED, FF, 33, C0, 55, 68, 5C, BE, 52, 30, 64, FF, 30, 64, 89, 20, B8, 74, BE, 52, 30, E8, 60, 21, EE, FF, 33, C0, 55, 68, 3A, BE, 52, 30, 64, FF, 30, 64, 89, 20, E8, 19, B3, F1, FF, BA, 9C, BE, 52, 30, E8, DB, A8, F1, FF, A1, 64, D7, 53, 30, 8B, 00, E8, 63, 7E, ED, FF, A1, 64, D7, 53, 30, 8B, 00, BA, DC, BE, 52, 30, E8, 42, 7E, ED, FF, 8D, 55, E8, 33, C0, E8, 54, 52, ED, FF, 8B, 45, E8, 8D, 55, EC, E8, 55, 66, ED, FF, 8B... 
[+]

Entropy:

6.4641

Developed / compiled with:

Microsoft Visual C++

Code size:

1.2 MB (1,224,704 bytes)

The file SDQuarantine.exe has been discovered within the following program.

Spybot - Search & Destroy 2 by Safer-Networking Ltd.

Spybot Search & Destroy (S&D) is a spyware and adware removal computer program compatible with Microsoft Windows. It scans the computer hard disk and/or RAM for malicious software.

www.safer-networking.org/2012/spybot-2-now-available-for-download

6% remove it

Scan SDQuarantine.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.