SearchProtocolHost.exe

  • File Path: C:\Windows\SysWOW64\SearchProtocolHost.exe
  • Description: Microsoft Windows Search Protocol Host

Hashes

Type Hash
MD5 057EE453817460D609D83DC6427A0400
SHA1 E30CB205CEE3D7054D859BE8591E88C09BAD2410
SHA256 0BB9CA31805A2507933710126C929EDEB5D6C741FB98FCC6BFE59EB1C8545B13
SHA384 B69CD1B11B317F6AD604BC94A812E61E0C56B3311EF709BD29A548B4676F54727B0575724D06FD04682DC19F07DF3930
SHA512 AB3BD2503B7266404EB2EBC7B2A707F347DEE078DEF3D268FF8B1271AD6F080DB2DEF28D7417AE7E1D58A0AD7FAFD3E106D60CAA5128B1DBD112B2A9B9646A11
SSDEEP 6144:R57gF9X9U0LrY7zNMU6x1wjrlgI+DULqsfbg5KszfC6SzordzrkR10efUK3g:i9NU0fYdMU6xoE8srC6BdzQztf9
IMP 1F5B4307B67AE3B1CBA7CA7438B42BD1
PESHA1 C9DB1C7744A1B637CAD061D8D169BF4EBC74637C
PE256 EE43D244541ACEA80C11270729462C1B18B90004A9C5D999CEB360EE79E136BB

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\SearchProtocolHost.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: SearchProtocolHost.exe
  • Product Name: Windows Search
  • Company Name: Microsoft Corporation
  • File Version: 7.0.19041.488 (WinBuild.160101.0800)
  • Product Version: 7.0.19041.488
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/0bb9ca31805a2507933710126c929edeb5d6c741fb98fcc6bfe59eb1c8545b13/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\SearchFilterHost.exe 30
C:\WINDOWS\system32\SearchFilterHost.exe 36
C:\WINDOWS\system32\SearchFilterHost.exe 38
C:\Windows\system32\SearchFilterHost.exe 36
C:\Windows\system32\SearchFilterHost.exe 36
C:\Windows\system32\SearchFilterHost.exe 32
C:\Windows\system32\SearchFilterHost.exe 33
C:\Windows\system32\SearchFilterHost.exe 30
C:\Windows\system32\SearchFilterHost.exe 32
C:\Windows\system32\SearchFilterHost.exe 27
C:\Windows\system32\SearchProtocolHost.exe 35
C:\WINDOWS\system32\SearchProtocolHost.exe 32
C:\Windows\system32\SearchProtocolHost.exe 38
C:\Windows\system32\SearchProtocolHost.exe 32
C:\Windows\system32\SearchProtocolHost.exe 33
C:\Windows\system32\SearchProtocolHost.exe 30
C:\Windows\SysWOW64\SearchFilterHost.exe 33
C:\Windows\SysWOW64\SearchFilterHost.exe 35
C:\Windows\SysWOW64\SearchFilterHost.exe 32
C:\WINDOWS\SysWOW64\SearchFilterHost.exe 30
C:\Windows\SysWOW64\SearchFilterHost.exe 35
C:\Windows\SysWOW64\SearchFilterHost.exe 32
C:\Windows\SysWOW64\SearchFilterHost.exe 36
C:\WINDOWS\SysWOW64\SearchFilterHost.exe 32
C:\Windows\SysWOW64\SearchFilterHost.exe 32
C:\Windows\SysWOW64\SearchProtocolHost.exe 33
C:\Windows\SysWOW64\SearchProtocolHost.exe 32
C:\Windows\SysWOW64\SearchProtocolHost.exe 43
C:\Windows\SysWOW64\SearchProtocolHost.exe 35
C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 29
C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 32
C:\Windows\SysWOW64\SearchProtocolHost.exe 46
C:\Windows\SysWOW64\SearchProtocolHost.exe 33
C:\Windows\SysWOW64\SearchProtocolHost.exe 32

MIT License. Copyright (c) 2020-2021 Strontic.