SearchProtocolHost.exe

  • File Path: C:\Windows\SysWOW64\SearchProtocolHost.exe
  • Description: Microsoft Windows Search Protocol Host

Hashes

Type Hash
MD5 7C22FED393CA0330A10B47848018C225
SHA1 33FD94195D9AB409B2A755149E7C3167162BDA98
SHA256 7D83D95776CFC93A8FC3502E8E6806D5AB72AB71B209A0CEBC69412DE61371BF
SHA384 F0042C78D371645E6A5A23AC5A534331882F2DA1FFD4AB88286D82A5429F9D6914BE2876C69259FD067A6CE49B9F2560
SHA512 CD00CFDB1A4CB6AAA4BEC288C85CB403CD7861714C9F1A041DD88A8BF5ACEFA265EA73ED232D943DE0A284FD55C51AA40E44FA4CC47DA50141CF97DF2E72D151
SSDEEP 6144:aIhqtFonMU3yNzf9CeQj0YR/dLfbyIS2XD/sjzVgWhrkR10efUK3Q+:DhyFoMUUzf9CeXYpwT2X4yWhQztf9P
IMP 1F5B4307B67AE3B1CBA7CA7438B42BD1
PESHA1 60ACAB36A5251359BAECAC305EBEFF523B61FC46
PE256 F69BF8323567E36A73AC469C730C63348F385530C5AE3B2870FB9BB194D50DA0

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\SearchProtocolHost.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: SearchProtocolHost.exe
  • Product Name: Windows Search
  • Company Name: Microsoft Corporation
  • File Version: 7.0.19041.1151 (WinBuild.160101.0800)
  • Product Version: 7.0.19041.1151
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/74
  • VirusTotal Link: https://www.virustotal.com/gui/file/7d83d95776cfc93a8fc3502e8e6806d5ab72ab71b209a0cebc69412de61371bf/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\SearchFilterHost.exe 40
C:\WINDOWS\system32\SearchFilterHost.exe 36
C:\WINDOWS\system32\SearchFilterHost.exe 35
C:\Windows\system32\SearchFilterHost.exe 32
C:\Windows\system32\SearchFilterHost.exe 35
C:\Windows\system32\SearchFilterHost.exe 38
C:\Windows\system32\SearchFilterHost.exe 35
C:\Windows\system32\SearchFilterHost.exe 40
C:\Windows\system32\SearchFilterHost.exe 32
C:\Windows\system32\SearchFilterHost.exe 35
C:\Windows\system32\SearchProtocolHost.exe 35
C:\WINDOWS\system32\SearchProtocolHost.exe 35
C:\Windows\system32\SearchProtocolHost.exe 35
C:\Windows\system32\SearchProtocolHost.exe 29
C:\Windows\system32\SearchProtocolHost.exe 32
C:\Windows\system32\SearchProtocolHost.exe 38
C:\Windows\SysWOW64\SearchFilterHost.exe 32
C:\Windows\SysWOW64\SearchFilterHost.exe 32
C:\Windows\SysWOW64\SearchFilterHost.exe 36
C:\WINDOWS\SysWOW64\SearchFilterHost.exe 32
C:\Windows\SysWOW64\SearchFilterHost.exe 35
C:\Windows\SysWOW64\SearchFilterHost.exe 36
C:\Windows\SysWOW64\SearchFilterHost.exe 32
C:\WINDOWS\SysWOW64\SearchFilterHost.exe 32
C:\Windows\SysWOW64\SearchFilterHost.exe 35
C:\Windows\SysWOW64\SearchProtocolHost.exe 35
C:\Windows\SysWOW64\SearchProtocolHost.exe 30
C:\Windows\SysWOW64\SearchProtocolHost.exe 32
C:\Windows\SysWOW64\SearchProtocolHost.exe 36
C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 36
C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 38
C:\Windows\SysWOW64\SearchProtocolHost.exe 33
C:\Windows\SysWOW64\SearchProtocolHost.exe 32
C:\Windows\SysWOW64\SearchProtocolHost.exe 35

MIT License. Copyright (c) 2020-2021 Strontic.