» DesktopSearchService.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

DesktopSearchService.exe

Copernic Desktop Search Service

Copernic Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Copernic Desktop Search - Corporate’. This is installed with Enterprise Super Search.

File name:

Publisher:

Copernic Inc. (signed and verified)

Product:

Copernic Desktop Search Service

Version:

3.4.0.25

MD5:

2b6bfcda7a0a4ed65c461a05454c094e

SHA-1:

8f0cda2ab8cc33ba7ba1cefc75d6d9fa29bd1793

SHA-256:

989bdecf90566ec23bfed006a8ed478077a4b83c50ceb853913e538de156cf16

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 10:36:39 PM UTC (today)

File size:

1.5 MB (1,549,760 bytes)

Product version:

DESKTOPSEARCHSERVICE 3.4.0 ENG

Original file name:

DesktopSearchService.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\enterprise super search\desktopsearchservice.exe

Digital Signature

Signed by:

Copernic Inc.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

7/11/2010 7:00:00 PM

Valid to:

7/11/2012 6:59:59 PM

Subject:

CN=Copernic Inc., O=Copernic Inc., L=Montreal, S=Quebec, C=CA

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

60C979EC5889064C3FC9497581C76FAA

File PE Metadata

Compilation timestamp:

7/29/2010 11:51:21 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

Entry address:

0x140368

Entry point:

55, 8B, EC, 83, C4, EC, 33, C0, 89, 45, EC, B8, C8, D0, 53, 00, E8, 9F, 73, EC, FF, 33, C0, 55, 68, 6E, 04, 54, 00, 64, FF, 30, 64, 89, 20, E8, 7C, C3, FF, FF, 84, C0, 0F, 84, C0, 00, 00, 00, E8, DB, 66, F9, FF, 8B, 40, 04, BA, 07, 00, 00, 00, E8, D2, BA, F5, FF, E8, 41, 5D, F8, FF, E8, 80, C3, FF, FF, A2, 50, 0B, 55, 00, E8, 12, D7, FE, FF, A0, 50, 0B, 55, 00, E8, 04, C4, FF, FF, 84, C0, 0F, 85, 88, 00, 00, 00, 80, 3D, 50, 0B, 55, 00, 00, 74, 7F, E8, 8A, C7, FF, FF, 84, C0, 74, 76, A1, 1C, 87, 54, 00, 8B... 
[+]

Entropy:

6.6015

Developed / compiled with:

Microsoft Visual C++

Code size:

1.2 MB (1,304,576 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Copernic Desktop Search - Corporate

Command:

"C:\Program Files\enterprise super search\desktopsearchservice.exe" \tray

The file DesktopSearchService.exe has been discovered within the following program.

Enterprise Super Search by Copernic Inc.

go.copernic.com?dest=cds3infoabout&l=ENG&e=CDS2CE&cpn=&b=304000025

About 7% of users remove it

Scan DesktopSearchService.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.