Should I block it?

No, this file is 100% safe to run.

Additional versions

7.00.9600.17031 (winblue_gdr.140221-1952)	2.26%
7.00.9600.16384 (winblue_rtm.130821-1623)	2.51%
7.00.9431.0 (winmain_bluemp.130615-1214)	0.25%
7.00.9200.16579 (win8_gdr.130408-1425)	5.78%
7.00.9200.16578 (win8_gdr.130405-1703)	0.50%
7.00.9200.16433 (win8_gdr.121010-1704)	6.78%
7.00.9200.16433 (win8_gdr.121010-1704)	0.75%
7.00.9200.16420 (win8_gdr.120919-1813)	0.50%
7.00.9200.16420 (win8_gdr.120919-1813)	0.25%
7.00.9200.16384 (win8_rtm.120725-1247)	0.75%
7.00.9200.16384 (win8_rtm.120725-1247)	0.50%
7.00.8250.0 (winmain_win8beta.120217-1520)	0.25%
7.00.7601.17610 (win7sp1_gdr.110503-1502)	35.18%
7.00.7601.17610 (win7sp1_gdr.110503-1502)	11.31%
7.00.7600.16808 (win7_gdr.110503-1506)	2.51%
7.00.7600.16808 (win7_gdr.110503-1506)	1.76%
7.00.7600.16401 (win7_gdr.090727-1504)	0.25%
7.00.7600.16385 (win7_rtm.090713-1255)	13.32%
7.00.7600.16385 (win7_rtm.090713-1255)	5.78%
7.00.6002.18005 (lh_sp2rtm.090410-1830)	5.53%
7.00.6002.18005 (lh_sp2rtm.090410-1830)	1.51%
7.0.6001.16503 (longhorn(wmbla).080526-2159)	1.01%
6.0.6000.16386 (vista_rtm.061101-2205)	0.75%

Relationships

Parent process

SearchIndexer.exe (Microsoft Windows Search Indexer by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

CopySid, GetLengthSid, IsValidSid, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, GetTokenInformation, AddAce, GetAce, GetAclInformation, AddAccessAllowedAce, InitializeAcl, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, TraceEvent, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, OpenProcessToken, OpenThreadToken, LookupAccountNameW, RegDeleteKeyW, RegDeleteValueW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegSetValueExW, RegQueryInfoKeyW, RegEnumKeyExW, RegEnumValueW, DeregisterEventSource, RegisterEventSourceW, ReportEventW, ImpersonateLoggedOnUser, GetSecurityDescriptorLength, RevertToSelf, LookupAccountSidW, CreateWellKnownSid, ConvertStringSecurityDescriptorToSecurityDescriptorA, RegQueryValueExW

kernel32.dll

GetUserDefaultUILanguage, GetSystemDefaultUILanguage, GetLocaleInfoW, CreateFileW, CreateFileMappingW, FindResourceExW, WaitForSingleObject, ReleaseMutex, OutputDebugStringW, DeleteFileA, FlushViewOfFile, GetLocalTime, CreateFileA, FormatMessageW, FileTimeToSystemTime, SystemTimeToTzSpecificLocalTime, GetTimeFormatW, LocalFree, SetPriorityClass, GetPriorityClass, SetLastError, ExpandEnvironmentStringsW, UnhandledExceptionFilter, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, OutputDebugStringA, InterlockedCompareExchange, Sleep, lstrlenA, InterlockedExchange, GetVersionExA, HeapSetInformation, GetCurrentProcessId, SetErrorMode, GetHandleInformation, GlobalAlloc, GlobalFree, MapViewOfFile, GlobalLock, GlobalUnlock, UnmapViewOfFile, SetEvent, WaitForMultipleObjects, GetModuleFileNameW, SearchPathW, LoadLibraryExW, FindResourceW, LoadResource, SizeofResource, VerifyVersionInfoW, MultiByteToWideChar, FreeLibrary, lstrcmpiW, LeaveCriticalSection, EnterCriticalSection, lstrlenW, InterlockedDecrement, GetCurrentThread, CloseHandle, GetCurrentProcess, GetProcessTimes, InterlockedIncrement, GetVersionExW, GetModuleHandleW, GetProcAddress, WideCharToMultiByte, GetLastError, DeleteCriticalSection, InitializeCriticalSection, RaiseException, CopyFileA

msshooks.dll

LoadMSSearchHooks

msvcrt.dll

DllMain

ntdll.dll

RtlUnwind, VerSetConditionMask

ole32.dll

CoCreateInstance, CoInitializeEx, CoInitializeSecurity, CoGetMarshalSizeMax, CreateStreamOnHGlobal, CoMarshalInterface, CoUninitialize, CoTaskMemRealloc, CoTaskMemAlloc, StringFromCLSID, CoTaskMemFree, CoReleaseMarshalData

shlwapi.dll

SHRegGetValueW

user32.dll

UnregisterClassA, LoadStringW, CharNextW

SearchFilterHost.exe

Microsoft Windows Search Filter Host by Microsoft

Remove SearchFilterHost.exe

Version:	7.0.6001.16503 (longhorn(wmbla).080526-2159)
MD5:	87889a983c015080fa813d7e32910d1e
SHA1:	10dab584b20a261cc67c25b7fd151ca06e4d62c8
SHA256:	7cdb618ab145cb0e2b2ab3c87542e56624c6fb075c7806494936bf52a9467aab

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is SearchFilterHost.exe?

Windows Search for the desktop and the enterprise delivers fast search capabilities for files, e-mail, documents, and more, provides performance enhancements and support for enterprise-critical features, and is easy to manage and extend with customized functionality.

About SearchFilterHost.exe (from Microsoft)

“Windows Search provides an easy and comprehensive solution for finding and organizing the content you care about, whether it's on your PC, in an e-mail message or attachment, on a remote file share,”

Details

File name:	SearchFilterHost.exe
Publisher:	Microsoft Corporation
Product name:	Microsoft Windows Search Filter Host
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\searchfilterhost.exe
File version:	7.0.6001.16503 (longhorn(wmbla).080526-2159)
Product version:	7.0.6001.16503
Size:	85.5 KB (87,552 bytes)
Digital DNA
PE subsystem:	Windows Console
Entropy:	6.065404
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.54075205%	0.028634%
Kernel CPU:	0.24581307%	0.013761%
User CPU:	0.29493898%	0.014873%
Kernel CPU time:	262 ms/min	100,923,805ms/min
Context switches:	2,128/sec	284/sec
Memory
Private memory:	3.99 MB	21.59 MB
Private (maximum):	17.46 MB
Private (minimum):	15.57 MB
Non-paged memory:	3.99 MB	21.59 MB
Virtual memory:	42.28 MB	140.96 MB
Virtual memory (peak):	42.28 MB	169.69 MB
Working set:	6.96 MB	18.61 MB
Working set (peak):	7.04 MB	37.95 MB
Resource allocations
Threads:	7	12
Handles:	150	600
GUI GDI count:	4	103
GUI USER count:	8	49

Process properties

Platform:	32-bit
Command lines:	"C:\Windows\System32\searchfilterhost.exe" 0 600 596 608 65536 604 "C:\Windows\System32\searchfilterhost.exe" 0 584 588 596 65536 592 "C:\Windows\System32\searchfilterhost.exe" 0 580 584 592 65536 588 "C:\Windows\System32\searchfilterhost.exe" 0 988 992 1000 65536 996
Owner:	SYSTEM
Parent process:	SearchIndexer.exe (Microsoft Windows Search Indexer by Microsoft)

Threads

Averages

SearchFilterHost.exe (main module)
Total CPU:	8.24544816%	0.272967%
Kernel CPU:	1.10258900%	0.107585%
User CPU:	7.14285916%	0.165382%
Context switches:	1,004/sec	79/sec
Memory:	100 KB	1.16 MB
ole32.dll
Total CPU:	0.19203077%
Kernel CPU:	0.04800769%
User CPU:	0.14402308%
Context switches:	322/sec
Memory:	1.24 MB