Process

ubiquitoussigned

searchprotocolhost.exe

Microsoft CorporationFirst seen 2026-06-09

File identity

File details
File type
PE32+ executable
Magic
PE32+ executable (console)
Architecture
x64
Original name
SearchProtocolHost.exe
Internal name
SearchProtocolHost.exe
Product
Windows® Search
Signing information
Status
Signed
Signature rate
100%
Publisher
Microsoft Corporation
Signer
Microsoft Windows
Issuer
Microsoft Windows Production PCA 2011
Thumbprint
facde3d80e99afcc15e08ac5a69bd22785287f79
File version1
  • 7.0.26100.5074 (WinBuild.160101.0800)100%
File size1
  • 684.00 KB100%

Execution context

File paths1
  • C:\Windows\System32\SearchProtocolHost.exe100%
User context2
  • SYSTEM75%
  • Interactive user25%
Integrity level2
  • System75%
  • Medium25%
Instances2
  • 171.4%
  • 228.6%
Session2
  • Session 077.4%
  • Session 122.6%
Token privileges1
  • SeChangeNotifyPrivilege100%

Analysis

About this process

No analyst write-up yet.

Security notes

No analyst write-up yet.

Anomaly signals

None defined yet.

Telemetry

OS prevalence1
  • Windows 11 (26200)100%
Observation timeline
First seen
2026-06-09
Last seen
2026-06-09
Machines
1
Executions
8
Edit this page on GitHub