home

search.exe

Sowsoft LLC

Publisher:
Sowsoft LLC  (signed and verified)

MD5:
0c8bbdc2d63fc1b47f10002c1738f067

SHA-1:
2b4f8b1736fb98631b539494ab114b704871563c

SHA-256:
51b14705f88aca7b67ebbb33789a14e81d3662f2a7e0aad557469bd3fb1c38d8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 10:50:40 PM UTC  (today)

File size:
890.4 KB (911,792 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\effective file search\search.exe

Digital Signature
Signed by:
Sowsoft LLC

Authority:
The USERTRUST Network

Valid from:
3/23/2009 1:00:00 AM

Valid to:
3/24/2011 12:59:59 AM

Subject:
CN=Sowsoft LLC, O=Sowsoft LLC, STREET="Prospect Mira, d. 75, str. 1", L=Moscow, S=Moscow, PostalCode=129110, C=RU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
042E3AD215DF337FD2A69CD2F3F9111B

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:vp8TFDSH6ALHMcsUJ8SBfV1x9WPCVBOX6W:vWlMTzMBUdVIi5W

Entry address:
0x1000

Entry point:
68, 01, C0, 5B, 00, E8, 01, 00, 00, 00, C3, C3, 91, 0E, 70, 2A, 5E, 8A, 49, 12, F8, 80, 9C, C9, 08, 13, 62, 0B, 1F, D3, 80, A5, 5A, D7, 24, 41, 5E, D7, 2D, 63, 2B, EA, B3, 8B, 35, A2, BF, B8, A1, 4B, 99, 58, F5, B4, DD, F1, 84, 21, 9E, E7, 0B, 62, 60, 14, CC, 7E, 8C, 08, AA, 35, FE, AD, 1B, 88, 96, CD, 1C, A7, 2D, 3B, E3, 73, AE, 2D, 27, 1B, D1, F8, 50, 35, CB, 54, 7F, AB, 75, 33, 63, D2, 26, AD, 30, 4B, EC, 12, F8, 43, E9, F0, 27, 7F, 8E, 03, 3B, F0, C2, 8F, 90, 30, 1E, C3, 89, E9, 3C, F1, A1, 7F, 03, 82...
 
[+]

Entropy:
7.6625

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.1 MB (1,138,688 bytes)

Scan search.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.