home

svchost.exe

Host Process for Windows Services

SHANGHAI UBISOFT ENTERTAINMENT INC.

Publisher:
Microsoft Corporation  (signed by SHANGHAI UBISOFT ENTERTAINMENT INC.)

Product:
Microsoft® Windows® Operating System

Description:
Host Process for Windows Services

Version:
10.0.14393.0 (rs1_release.160715-1616)

MD5:
b1b034bae9e2047511490a2542374c4e

SHA-1:
0e88f85d7b2a011c59633942e517c13e918683b5

SHA-256:
adc5221477d32ce55f90bb98320cfa5cc0c01c599af4232422b13bb0aa31939e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 12:50:42 AM UTC  (today)

File size:
2.1 MB (2,173,472 bytes)

Product version:
10.0.14393.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
svchost.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\svchost.exe

Digital Signature
Signed by:
SHANGHAI UBISOFT ENTERTAINMENT INC.

Authority:
Thawte, Inc.

Valid from:
9/21/2011 3:00:00 AM

Valid to:
9/21/2013 2:59:59 AM

Subject:
CN=SHANGHAI UBISOFT ENTERTAINMENT INC., O=SHANGHAI UBISOFT ENTERTAINMENT INC., L=Shanghai, S=Shanghai, C=CN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
43230BF856DF412187888770705AEE7D

File PE Metadata
Compilation timestamp:
1/22/2017 3:58:06 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

Entry address:
0x21291E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
2.1 MB (2,165,248 bytes)

Scan svchost.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.