SearchProtocolHost.exe

  • File Path: C:\Windows\system32\SearchProtocolHost.exe
  • Description: Microsoft Windows Search Protocol Host

Hashes

Type Hash
MD5 A10911A681274DEFFCDB53F9FD3ED81F
SHA1 ADD574ABB1DDEC1C055865BF61AD7FA57D7DAD1D
SHA256 81C14AECA01720921DDDF5C180BBD415BCD7767945F1BD57897CBD52BC167E49
SHA384 3405D85C4EF28C29B1D732C725120DB0209DCF02800C02CA2EEC7C9271B0F8D1D9F9933E01AE7B4ADD97B7E8FB8F1EE5
SHA512 113C72098D82A01C887D025F9285D1D71730AE4E54CB5221FFBBD1649A481DB6FFEFEDABE05DBFA3C20595A0C389626A8E2D45761E0554F74008A987C15EBB44
SSDEEP 12288:XpZOaFkSla9rM6EmFSZ6y2cyRN7Qztf9:Z3la9grzmcy7Qv
IMP 8B2A73CF81704F7AED84C67134EC39AC
PESHA1 335E6F26879DF4208D2BDC2F664557F63498C0BE
PE256 DC11A22AC2E002D5DC9FAF1272FF8EF833625FCD8FE2ED1FF5C01DFB27F29ABE

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\SearchProtocolHost.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: SearchProtocolHost.exe
  • Product Name: Windows Search
  • Company Name: Microsoft Corporation
  • File Version: 7.0.19041.1151 (WinBuild.160101.0800)
  • Product Version: 7.0.19041.1151
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/81c14aeca01720921dddf5c180bbd415bcd7767945f1bd57897cbd52bc167e49/detection

MIT License. Copyright (c) 2020-2021 Strontic.