Should I block it?

60%

60% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

1.0.0.0	10.00%
1.0.0.0	28.00%
1.0.0.0	14.00%
1.0.0.0	4.00%
1.0.0.0	16.00%
1.0.0.0	4.00%
1.0.0.0	2.00%
1.0.0.0	2.00%
1.0.0.0	10.00%
1.0.0.0	2.00%
1.0.0.0	8.00%

(Note, Simply Tech Ltd publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

PE file structure

Show functions

Import table

mscoree.dll

DllMain

ProtectedSearch.exe

ProtectedSearch by Simply Tech Ltd (Signed)

Remove ProtectedSearch.exe

Version:	1.0.0.0
MD5:	52143c0a10231b04a4e494731f9d62bf
SHA1:	b043e5a166e8a64adfae297b902fd60e0f07fbd8
SHA256:	8dbfd95bfe2c495be8c224a93f242190c2a87b226730c950a5cbd3717036396d

What is ProtectedSearch.exe?

Protected Search is an advertising supported program installed into Internet Explorer and Firefox web browsers. Protected Search collects and stores information about your web browsing habits and sends this information to its remote servers in order to provide injected advertising in search results and various other places. Protected Search will also modify your home page and search provider.

About ProtectedSearch.exe (from Simply Tech Ltd)

“SImplyGen provides browser and Application add ons ("PredictAd Add Ons") that enables users to receive website information and additional search and browsing enhancement. You acknowledge and agree tha”

Details

File name:	protectedsearch.exe
Publisher:	Simplygen
Product name:	ProtectedSearch
Typical file path:	C:\Program Files\protected search\protectedsearch.exe
File version:	1.0.0.0
Size:	66.07 KB (67,656 bytes)
Certificate
Issued to:	Simply Tech Ltd
Authority (CA):	COMODO CA Limited
Effective date:	Wednesday, April 4, 2012
Expiration date:	Saturday, April 5, 2014
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Programs

The following program will install this file

Protected Search

SimplyGen LTD

82% remove

Protected Search displays various advertisements and tracks and reports your Internet browsing behavior. Protected Search is an advertising supported program installed into Internet Explorer and Firefox web browsers. Protected Search collects and stores information about your web browsing habits and sends this information to its remote servers in order to provide injected advertising in search results and various other places. Protected...

Behaviors

Scheduled tasks

The task 'Protected Search' runs on logon in the path '\ProtectedSearch\Protected Search'
Entry path 'C:\WINDOWS\Tasks\Protected Search.job'
Entry path '\ProtectedSearch\Protected Search'

Scheduled tasks startups

Set to load on user login (bypasses Windows UAC if enabled)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.03350897%	0.028634%
Kernel CPU:	0.01720921%	0.013761%
User CPU:	0.01629976%	0.014873%
Kernel CPU time:	874 ms/min	100,923,805ms/min
CPU cycles:	48,157/sec	17,470,203/sec
Memory
Private memory:	16.65 MB	21.59 MB
Private (maximum):	9.09 MB
Private (minimum):	4.47 MB
Non-paged memory:	16.65 MB	21.59 MB
Virtual memory:	149.05 MB	140.96 MB
Virtual memory (peak):	154.23 MB	169.69 MB
Working set:	5.07 MB	18.61 MB
Working set (peak):	15.77 MB	37.95 MB
Page faults:	11,183/min	2,039/min
I/O
I/O read transfer:	73 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	33 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	10	12
Handles:	384	600
GUI GDI count:	9	103
GUI GDI peak:	9	142
GUI USER count:	5	49
GUI USER peak:	6	71

Process properties

Integrety level:	High
Platform:	32-bit
Command line:	"C:\Program Files\protected search\protectedsearch.exe"
Owner:	User
Parent process:	taskeng.exe (Task Scheduler Engine by Microsoft)

Threads