home

search.exe

Sowsoft LLC

Publisher:
Sowsoft LLC  (signed and verified)

MD5:
187dd5b5182e8fc0e60927134d0518b2

SHA-1:
9089a653d31ffa7c78c56d075099d963330c6511

SHA-256:
d0a05441383e63bdc5c84e8b92a9ddcb29e4e8f5ba4bf99038357cfefe0a284b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 7:14:14 PM UTC  (today)

File size:
893.2 KB (914,648 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\efs\search.exe

Digital Signature
Signed by:
Sowsoft LLC

Authority:
COMODO CA Limited

Valid from:
7/27/2011 7:00:00 PM

Valid to:
7/27/2013 6:59:59 PM

Subject:
CN=Sowsoft LLC, O=Sowsoft LLC, STREET="Prospect Mira, d.75, str. 1", L=Moscow, S=Moscow, PostalCode=129110, C=RU

Issuer:
CN=COMODO Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
10CDC7CCFE3D2396252D042EEE61DDF1

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:JSGI6c+Y8K7slEs8cJ9lSObDJpmiWPCVBo6YI879e:UscpXdmBbbiiTaY

Entry address:
0x1000

Entry point:
68, 01, D0, 5B, 00, E8, 01, 00, 00, 00, C3, C3, 91, 0E, 70, 2A, 5E, 8A, 49, 12, F8, 80, 9C, C9, 6A, 86, 26, 26, 67, FA, CA, F2, 07, D7, 81, 6F, CF, 5D, 7F, 6B, 05, 56, 30, 86, 21, F3, 0F, 08, 8E, 7E, C9, 6F, 46, 5A, 60, 64, 7A, CE, A4, 3E, 68, FF, 0D, 7C, BB, E1, 4A, F3, 0B, AA, E1, 9B, 9C, E2, 34, 3C, 36, A5, 39, 5F, 89, B1, 56, EA, D4, 7B, 89, 90, 8E, B3, 57, CC, EB, C4, 14, E1, A1, 3C, 3D, AC, 87, 68, 4E, 40, 72, 67, B8, 22, 04, 5A, 28, 46, 4F, 39, 22, 83, 09, 69, B2, 01, 46, 65, FC, 03, 40, 76, 67, 5E...
 
[+]

Entropy:
7.6626

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.1 MB (1,140,736 bytes)

The file search.exe has been discovered within the following program.

Effective File Search 6.8.1  by SOW
Search any files on your computer or local network with this effective software.
www.sowsoft.com/search.htm
6% remove it
 
Powered by Should I Remove It?

Scan search.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.