Gridinsoft Logo

The SearchApp.exe (Search application) File Analysis

Updated 2 months ago
Checked by Malaware Check
SearchApp.exe

Technical Analysis

File Name SearchApp.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-12 23:00:44 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
3,969,008
File Size (bytes)
2025-03-12
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
dc2f2378f60c01a344613c632f134b36
SHA1
0d1ec2c9f18b599aa4922844f3fd0009cb9d82e0
SHA256
0da7eea7bb8583a8d994dfbf2dc620feb96b9f6b9f89b60f53a269bfcd2ee1a2
SHA512
03ee1dd34d703b4165704af9c66ee9d1d9c332c7448c474dc542b3bab1d93cb688dfb07fc70ceb24368aec19d0d39b2ad75990c7f911b11efd78c6a1e609b8c9
ImpHash
78b3da562821ca1572baba8519360bad

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x1400c8dc0
Compilation Time 1973-06-12 20:28:59
Checksum 0x003d5ffd (Actual: 0x003d5ffd)
OS Version 10.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path SearchApp.pdb
Digital Signature OK
Imports 65 libraries
Exports 2 functions
Resources 1 Resources
Sections 7 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription Search application
FileVersion 10.0.19041.5438 (WinBuild.160101.0800)
InternalName SearchApp
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename SearchApp.exe
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.19041.5438
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 2,699,302 bytes 2,699,776 bytes 6.25 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 29A97080441792F59787CFE909000841
.rdata 0x00295000 843,880 bytes 844,288 bytes 5.84 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 114EE79C6DD180476D3A954F75D1837E
.data 0x00364000 214,096 bytes 176,128 bytes 4.33 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E5D48618E1B66A88E5F63B3CDCA8A74A
.pdata 0x00399000 194,052 bytes 194,560 bytes 6.42 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 15B1C7F4B1638740BE85C8B0E9ACEEE6
.didat 0x003c9000 48 bytes 512 bytes 0.35 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 8B8E679FB8133F470F3C39E4052BD838
.rsrc 0x003ca000 1,016 bytes 1,024 bytes 3.36 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 79429CC2B2F100630DEB9C4F31AEB8A4
.reloc 0x003cb000 41,892 bytes 41,984 bytes 5.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 0820097C6FBD8D2638971E7109DD095F

Resource Analysis

▼
Total Resources: 1 (916 bytes)
Resource Type Count Total Size Percentage
RT_VERSION 1 916 bytes
100%

Certificate Chain Analysis

▼
Certificate Information
Product Microsoft® Windows® Operating System
Description Search application
File Version 10.0.19041.5438 (WinBuild.160101.0800)
Original Name SearchApp.exe
Signing Date 10:09 PM 01/22/2025 (135 days ago)
Verification Status Signed
Signers Microsoft Windows; Microsoft Windows Production PCA 2011; Microsoft Root Certificate Authority 2010
Counter Signers Microsoft Time-Stamp Service; Microsoft Time-Stamp PCA 2010; Microsoft Root Certificate Authority 2010
Internal Name SearchApp
Copyright © Microsoft Corporation. All rights reserved.
Certificate Chain Summary
Microsoft Windows #1 Primary
Validity Period: 2024-09-12 20:04:06 → 2025-09-11 20:04:06
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 04 A7 04 3E E4 22 C8 34 FA FC 00 00 00 00 04 A7
Microsoft Windows Production PCA 2011 #2 Chain
Validity Period: 2011-10-19 18:41:42 → 2026-10-19 18:51:42
Signature Algorithm: sha256RSA
Serial Number: 61 07 76 56 00 00 00 00 00 08
Microsoft Time-Stamp Service #3 Chain
Validity Period: 2023-12-06 18:45:22 → 2025-03-05 18:45:22
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 01 E8 50 B0 80 CF 2B 72 99 4D 00 01 00 00 01 E8
Microsoft Time-Stamp PCA 2010 #4 Chain
Validity Period: 2021-09-30 18:22:25 → 2030-09-30 18:32:25
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware