Should I block it?
No, this file is 100% safe to run.
Relationships
Parent process
Related files
 PE file structure
|
Show functions |
Import table
kernel32.dll
SetErrorMode, GetModuleHandleA
msvcrt.dll
DllMain
ntdll.dll
NtQueryInformationProcess, NtSetInformationProcess
ole32.dll
CoInitializeEx, CoUninitialize, CoCreateInstance
cidaemon.exe
Indexing Service filter daemon by Microsoft
| Version: | 5.1.2600.0 (xpclient.010817-1148) |
| MD5: | 582304f6f1946fa5068cf143d729d7ed |
| SHA1: | 3908ac69a90bfc240fd52da26bfb722066ee650b |
| SHA256: | d05b5c26a7ac55d1f1d6ee8dc78eaaa7dd402d0d7a0635b924c9afc189fb14e9 |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Overview
cidaemon.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent
cisvc.exe (Content Index service by Microsoft). This version is installed on Windows XP and is compiled as a 32 bit program.
Details
| File name: | cidaemon.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Indexing Service filter daemon |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Windows\System32\cidaemon.exe |
| File version: | 5.1.2600.0 (xpclient.010817-1148) |
| Product version: | 5.1.2600.0 |
| Size: | 8 KB (8,192 bytes) |
| Digital DNA |
| PE subsystem: | Windows Console |
| File packed: | No |
| Code language: | Microsoft Visual C++ |
| .NET CLR: | No |
More details
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00086425% | |
| Kernel CPU: | 0.00043565% | |
| User CPU: | 0.00042860% | |
| Kernel CPU time: | 32,122 ms/min | |
| Context switches: | 122/sec | |
| Memory |
| Private memory: | 2.8 MB | |
| Private (maximum): | 5.99 MB | |
| Private (minimum): | 396.67 KB | |
| Non-paged memory: | 2.8 MB | |
| Virtual memory: | 44.64 MB | |
| Virtual memory (peak): | 63.31 MB | |
| Working set: | 1.97 MB | |
| Working set (peak): | 7.01 MB | |
| Page faults: | 309,049/min | |
| I/O |
| I/O read transfer: | 203.21 KB/sec | |
| I/O read operations: | 116/sec | |
| I/O write transfer: | 8.39 KB/sec | |
| I/O write operations: | 2/sec | |
| I/O other transfer: | 34.99 KB/sec | |
| I/O other operations: | 1,325/sec | |
| Resource allocations |
| Threads: | 5 | |
| Handles: | 176 | |
| GUI GDI count: | 33 | |
| GUI USER count: | 20 | |
Process properties
| Integrety level: | Undefined |
| Platform: | 32-bit |
| Command lines: |
- "cidaemon.exe" downleveldaemon "C:\inetpub\catalog.wci" 196672l 324l
- "cidaemon.exe" downleveldaemon "C:\system volume information\catalog.wci" 196672l 324l
- "cidaemon.exe" downleveldaemon "C:\system volume information\catalog.wci" 196672l 2552l
- "cidaemon.exe" downleveldaemon "C:\system volume information\catalog.wci" 196672l 1996l
|
| Owner: | SYSTEM |
| Parent process: | cisvc.exe (Content Index service by Microsoft) |
Threads
Averages
| cidaemon.exe (main module) |
| Total CPU: | 0.57447913% | |
| Kernel CPU: | 0.14455737% | |
| User CPU: | 0.42992175% | |
| Context switches: | 36/sec | |
| Memory: | 20 KB | |
| ole32.dll |
| Total CPU: | 0.15204221% | |
| Kernel CPU: | 0.09826621% | |
| User CPU: | 0.05377600% | |
| Context switches: | 57/sec | |
| Memory: | 1.24 MB | |
| query.dll |
| Total CPU: | 0.00008318% | |
| Kernel CPU: | 0.00004159% | |
| User CPU: | 0.00004159% | |
| Memory: | 1.39 MB | |
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
100.00% |
|
Distribution by country
India installs about 80.00% of Indexing Service filter daemon.
