home

svchost.exe

Host Process for Windows Services

SHANGHAI UBISOFT ENTERTAINMENT INC.

Publisher:
Microsoft Corporation  (signed by SHANGHAI UBISOFT ENTERTAINMENT INC.)

Product:
Microsoft® Windows® Operating System

Description:
Host Process for Windows Services

Version:
10.0.14393.0 (rs1_release.160715-1616)

MD5:
db144651a0f1e9c70d4edb782d7ab09f

SHA-1:
ec7c91c308625a31bfad89e656854a83882f0a30

SHA-256:
640028c1055bd93f7756b1acdccf1ae49b2cdee5ba616e0097a2ea6883bf5a39

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 11:31:14 PM UTC  (a few moments ago)

File size:
575.5 KB (589,344 bytes)

Product version:
10.0.14393.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
svchost.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\svchost.exe

Digital Signature
Signed by:
SHANGHAI UBISOFT ENTERTAINMENT INC.

Authority:
Thawte, Inc.

Valid from:
9/20/2011 7:00:00 PM

Valid to:
9/20/2013 6:59:59 PM

Subject:
CN=SHANGHAI UBISOFT ENTERTAINMENT INC., O=SHANGHAI UBISOFT ENTERTAINMENT INC., L=Shanghai, S=Shanghai, C=CN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
43230BF856DF412187888770705AEE7D

File PE Metadata
Compilation timestamp:
1/20/2017 8:58:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

Entry address:
0x8FDEE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 10, 00, 00, 00, 18, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 30, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 09, 04, 00, 00, 48, 00, 00, 00, 58, 00, 09, 00, B8, 03, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, A8, 03, 34, 00, 00, 00, 56, 00, 53, 00, 5F, 00, 56, 00, 45, 00, 52, 00, 53, 00, 49, 00...
 
[+]

Entropy:
7.8551

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
567.5 KB (581,120 bytes)

Scan svchost.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.