SearchProtocolHost.exe

  • File Path: C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
  • Description: Microsoft Windows Search Protocol Host

Hashes

Type Hash
MD5 CCBCB187970A9955988382A68A6E3A3F
SHA1 7ACDCECEF4EB7FA93B790A5BFF8796F7EB798C9A
SHA256 65EF4A9763ABE4DE4ECD2EFCDB6F53CA508ED81F99AF346F95718323EED5C41B
SHA384 48677AA5A48B429B5ADFE714A73682FB81841AF87F94E3DE93077B23AE2ADAECB7B0DD37F31B55F5A5092FAADE933704
SHA512 CA0D925ADD4CCD0477E3EB0BA98FDC0DE24E8D0C54626CAD3FA70B98FE84F1684B4F0E2F10251522CA6921E3A7D7CE95259111082983691332D7E1C203CA5B77
SSDEEP 6144:f1tTfL6++p3uWe8TH7j3LiXB7Qabo22zo2WL75P222p29V9hpcrkR10efUK30:f1tTD6ppwYuB7NpcQztf90
IMP DAFA4A4FA96BE58215F028E7C57EC18F
PESHA1 59BAFB7640E99E4212ED5AF72450BEFB4AFEB471
PE256 A274F9FB64BF22E31C0DA700AE6F6C67BBD30A62FB2244DCF886163059F94A2F

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\wow64.dll
C:\WINDOWS\System32\wow64base.dll
C:\WINDOWS\System32\wow64con.dll
C:\WINDOWS\System32\wow64cpu.dll
C:\WINDOWS\System32\wow64win.dll
C:\WINDOWS\SysWOW64\SearchProtocolHost.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: SearchProtocolHost.exe
  • Product Name: Windows Search
  • Company Name: Microsoft Corporation
  • File Version: 7.0.22000.282 (WinBuild.160101.0800)
  • Product Version: 7.0.22000.282
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/65ef4a9763abe4de4ecd2efcdb6f53ca508ed81f99af346f95718323eed5c41b/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\SearchFilterHost.exe 35
C:\WINDOWS\system32\SearchFilterHost.exe 30
C:\WINDOWS\system32\SearchFilterHost.exe 29
C:\Windows\system32\SearchFilterHost.exe 27
C:\Windows\system32\SearchFilterHost.exe 32
C:\Windows\system32\SearchFilterHost.exe 33
C:\Windows\system32\SearchFilterHost.exe 35
C:\Windows\system32\SearchFilterHost.exe 33
C:\Windows\system32\SearchFilterHost.exe 30
C:\Windows\system32\SearchFilterHost.exe 30
C:\Windows\system32\SearchProtocolHost.exe 30
C:\WINDOWS\system32\SearchProtocolHost.exe 32
C:\Windows\system32\SearchProtocolHost.exe 32
C:\Windows\system32\SearchProtocolHost.exe 30
C:\Windows\system32\SearchProtocolHost.exe 29
C:\Windows\system32\SearchProtocolHost.exe 30
C:\Windows\SysWOW64\SearchFilterHost.exe 27
C:\Windows\SysWOW64\SearchFilterHost.exe 35
C:\Windows\SysWOW64\SearchFilterHost.exe 32
C:\WINDOWS\SysWOW64\SearchFilterHost.exe 30
C:\Windows\SysWOW64\SearchFilterHost.exe 32
C:\Windows\SysWOW64\SearchFilterHost.exe 33
C:\Windows\SysWOW64\SearchFilterHost.exe 27
C:\WINDOWS\SysWOW64\SearchFilterHost.exe 27
C:\Windows\SysWOW64\SearchFilterHost.exe 32
C:\Windows\SysWOW64\SearchProtocolHost.exe 29
C:\Windows\SysWOW64\SearchProtocolHost.exe 35
C:\Windows\SysWOW64\SearchProtocolHost.exe 33
C:\Windows\SysWOW64\SearchProtocolHost.exe 32
C:\Windows\SysWOW64\SearchProtocolHost.exe 36
C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 36
C:\Windows\SysWOW64\SearchProtocolHost.exe 30
C:\Windows\SysWOW64\SearchProtocolHost.exe 33
C:\Windows\SysWOW64\SearchProtocolHost.exe 29

MIT License. Copyright (c) 2020-2021 Strontic.