» dzsearch.exe
Overview
Analysis
File Details

dzsearch.exe

DzSoft Ltd

File name:

dzsearch.exe

Publisher:

DzSoft Ltd (signed and verified)

Version:

1.0.0.6

MD5:

d184ff4aac153d95b1838d4d222ae44e

SHA-1:

c5409dca3b62d7734684646c40f4c8879272dc28

SHA-256:

cc90ae726d74dedeb3270fabc76e5402c6c5e7dd010642096daa0438841193d6

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/26/2024 2:09:33 AM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.ASPack

0.98/17411

Quick Heal

(Suspicious) - DNAScan

10.14.11.00

File size:

695.2 KB (711,864 bytes)

Product version:

1.0.0.0

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\dzsoft\php editor\dzsearch.exe

Digital Signature

Signed by:

DzSoft Ltd

Authority:

The USERTRUST Network

Valid from:

5/15/2008 1:00:00 AM

Valid to:

5/16/2011 12:59:59 AM

Subject:

CN=DzSoft Ltd, O=DzSoft Ltd, STREET="Gogolya, 12/21, k.9", L=Kremenchuk, S=Poltavska oblast, PostalCode=39605, C=UA

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

0089757E55BA07F3A4ADB9DA4C14A3E6B4

File PE Metadata

Compilation timestamp:

9/9/2010 11:23:02 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:sn4l40zAliSxEJC/mkY8EaZNzHF3afMKbyWCz3myyruW1meyUGpGl8IUA4:IAf8llUCmT8EaZdl3SMcs3myyruW1HGD

Entry address:

0x1000

Entry point:

68, 01, D0, 5D, 00, E8, 01, 00, 00, 00, C3, C3, E7, 04, 0F, 67, 72, 82, 10, 91, F9, E6, 7B, E6, 8D, 8F, EE, E8, 64, 02, 34, D6, F9, EB, 63, 14, 3F, D8, 65, 8A, D2, E4, 93, 98, 61, 05, 26, 26, 0C, 96, 9B, 47, F1, 13, 5A, B7, 47, 75, B9, 9E, 42, 94, FB, 5F, C5, 1D, 23, 29, C3, 35, 89, 38, BE, 60, AF, 2D, 4B, A3, 19, B2, 7E, E4, 6E, 61, C4, CA, 7A, F0, 54, 30, 45, 25, 34, 5B, 3F, E3, 7B, FC, 1C, 5F, 8A, 49, 99, BB, BD, 91, C3, 90, 8F, A3, 5B, C4, 35, E7, 39, 65, 54, 0E, CA, 8A, B4, 00, A7, F3, D2, AD, 14, 71... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1005 KB (1,029,120 bytes)

Scan dzsearch.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.