The SearchHost.exe File Analysis

Updated on 2023-10-13 (5 months ago)

Online Virus Checker	v.1.0.143.174
DB Version:	2023-10-13 13:06:10

The SearchHost.exe Is Safe File

File	SearchHost.exe
Checked	2023-10-13 10:52:45
MD5	347b6456893951a2281c8c1fc26e026c
SHA1	aeb9060bbbe4ea7cb40bd5b608bf9cfd59f88193
SHA256	3ea5515a94247dcce2945c81680fd1555a2e4db83cf70432c467c7f4f32b26e0
SHA512	5b5619b6b2b3c3203d3d7df1c7f554e0784375eb2e8e22e534e39b307d7d5b39f1a50971f133c0dae28db6d2ba2115c0896a0ac13fbee08044c8806da74c83c7
Imphash	44c701ad782d9785365b6d8072b898c8
File Size	9728 bytes

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Start by downloading Gridinsoft Anti-Malware to your computer.
Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
Click on the "Standard Scan" button.
After the scanning process is finished, click on "Clean Now" to remove any detected threats.
If prompted, restart your system to complete the removal process.

File Version Information

CompanyName	Microsoft Corporation
FileDescription
FileVersion	623.22800.10.0
InternalName	SearchHost.exe
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	SearchHost.exe
ProductName	Microsoft® Windows® Operating System
ProductVersion	623.22800.10.0
Translation	0x0409 0x04b0

Portable Executable Info

Image Base:	0x140000000
Entry Point:	0x1400012e0
Compilation:	2023-09-28 04:13:37
Checksum:	0x000102b1 (Actual: 0x000102b1)
OS Version:	6.2
PDB Path:	SearchHost.pdb
PEiD:	PE32+ executable (GUI) x86-64, for MS Windows
Sign:	The PE file does not contain a certificate table.
Sections:	6
Imports:	api-ms-win-core-winrt-l1-1-0, api-ms-win-core-libraryloader-l1-2-0, VCRUNTIME140_APP, api-ms-win-crt-runtime-l1-1-0, api-ms-win-crt-math-l1-1-0, api-ms-win-crt-stdio-l1-1-0, api-ms-win-crt-locale-l1-1-0, api-ms-win-crt-heap-l1-1-0, api-ms-win-core-profile-l1-1-0, api-ms-win-core-processthreads-l1-1-0, api-ms-win-core-sysinfo-l1-1-0, api-ms-win-core-interlocked-l1-1-0,
Exports:	0
Resources:	1

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Entropy
.text	0x00001000	0x0000090c	0x00000a00	d7aa4e0e26953b483a4ad403856af2aa	5.66
.rdata	0x00002000	0x00000d8e	0x00000e00	f487b635b6b2d0acc6fe9a173a68fc61	3.93
.data	0x00003000	0x00000640	0x00000200	885e72865555e45f2025a189e3f108a8	0.48
.pdata	0x00004000	0x000000fc	0x00000200	edd955b2292dd9b412b9283c4c66e470	2.03
.rsrc	0x00005000	0x000003b0	0x00000400	ff8e4e57b72647e04b15b766781ab27a	3.11
.reloc	0x00006000	0x00000030	0x00000200	83915f38e97f074db63f493db9472d2e	0.70

Using this site