Gridinsoft Logo
File Icon

The SearchProtocolHost.exe (Microsoft Windows Search Protocol Host) File Analysis

Updated 2 months ago
Checked by Malaware Check
SearchProtocolHost.exe

Technical Analysis

File Name SearchProtocolHost.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-11 04:00:40 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
479,232
File Size (bytes)
2025-03-11
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
40718d05814c83eafd4cc2d8a89662b5
SHA1
b4b37ba76914ca9b951e4a6366d5e52430459005
SHA256
73cc70e86106fb3c862830105877af18015d39f4e719e44260d2682b212f8ce4
SHA512
853b0e3fed071b870a444ffbd40a98beadaebe2ee8d31c8e0be5189f0789529753aa2d05dae0325a797c47569648fc9c285b43b4fca8f25544474d472baa6550
ImpHash
8c356ea975557806a061fcb7cbf224b7

PE Analysis

Basic Information

▼
Icon
Hash: a60d07d70f34be772ec641eee732db82
Fuzzy: badcff590785d887d9bf23d8a9b5d9cd
dHash: 10f071f092e87890
Image Base 0x140000000
Entry Point 0x1400032f0
Compilation Time 2064-11-28 21:25:57
Checksum 0x00077352 (Actual: 0x00077352)
OS Version 10.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
PDB Path SearchProtocolHost.pdb
Digital Signature No valid SignedData structure was found.
Imports 43 libraries
Exports 0 functions
Resources 16 Resources
Sections 8 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription Microsoft Windows Search Protocol Host
FileVersion 7.0.26100.3323 (WinBuild.160101.0800)
InternalName SearchProtocolHost.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename SearchProtocolHost.exe
ProductName Windows® Search
ProductVersion 7.0.26100.3323
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 255,221 bytes 258,048 bytes 6.18 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 17F02A452A2ACB04390815A194DA5571
fothk 0x00040000 4,096 bytes 4,096 bytes 0.02 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ E94C21DB11C2E2E13244F45C971E8CD6
.rdata 0x00041000 87,046 bytes 90,112 bytes 4.62 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E4450AFE53C200B48F2717F506DB973A
.data 0x00057000 9,984 bytes 8,192 bytes 1.87 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 47F342542F31C2DDA3112B25354E1805
.pdata 0x0005a000 15,372 bytes 16,384 bytes 5.33 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8A2EA7457CD741A4640BB29BD08AF4A3
.didat 0x0005e000 440 bytes 4,096 bytes 0.40 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C13F578778286595655AB2E61DD358AD
.rsrc 0x0005f000 86,704 bytes 90,112 bytes 6.89 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 41C1501B196B213E2771F1E823A842DC
.reloc 0x00075000 1,444 bytes 4,096 bytes 2.67 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 54315B1877FE43079782304405F2E8F8
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 16 (85,814 bytes)
Resource Type Count Total Size Percentage
RT_ICON 13 83,701 bytes
97.5%
RT_GROUP_ICON 1 188 bytes
0.2%
RT_VERSION 1 952 bytes
1.1%
RT_MANIFEST 1 973 bytes
1.1%

Certificate Chain Analysis

▼
Certificate Information
Product Windows® Search
Description Microsoft Windows Search Protocol Host
File Version 7.0.26100.3323 (WinBuild.160101.0800)
Original Name SearchProtocolHost.exe
Internal Name SearchProtocolHost.exe
Copyright © Microsoft Corporation. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware