home

svchost.exe

Host Process for Windows Services

Microsoft Corporation

The Windows Service Host (SvcHost) is a system process that hosts multiple Windows services in a shared process. Services run in SvcHost are implemented as dynamically-linked libraries (DLLs). It is included with the Windows 7 OS.
Publisher:
Microsoft Corporation

Product:
Microsoft® Windows® Operating System

Description:
Host Process for Windows Services

 
Part of the Windows 7 Operating System

Version:
6.1.7600.16385 (win7_rtm.090713-1255)

MD5:
c78655bc80301d76ed4fef1c1ea40a7d

SHA-1:
619652b42afe5fb0e3719d7aeda7a5494ab193e8

SHA-256:
93b2ed4004ed5f7f3039dd7ecbd22c7e4e24b6373b4d9ef8d6e45a179b13a5e8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
5/14/2025 5:33:13 PM UTC  (today)

File size:
26.5 KB (27,136 bytes)

Product version:
6.1.7600.16385

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
svchost.exe.mui

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Windows\System32\svchost.exe

File PE Metadata
Compilation timestamp:
7/13/2009 7:31:13 PM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:vWkX7q+f5TYvVeZMmn+0C4xirEbvK/PK:vX5fhuZE5ZvK/PK

Entry address:
0x246C

Entry point:
48, 83, EC, 28, E8, 4B, FC, FF, FF, 48, 83, C4, 28, EB, 09, 90, 90, 90, 90, 90, 90, 90, 90, 90, 48, 89, 74, 24, 08, 48, 89, 7C, 24, 10, 4C, 89, 64, 24, 18, 41, 55, 48, 83, EC, 30, 65, 48, 8B, 04, 25, 30, 00, 00, 00, 48, 8B, 78, 08, 45, 33, E4, 33, C0, F0, 48, 0F, B1, 3D, 8C, 4B, 00, 00, 0F, 85, C6, 00, 00, 00, BF, 01, 00, 00, 00, 8B, 05, 97, 4B, 00, 00, 3B, C7, 0F, 84, D5, 00, 00, 00, 8B, 05, 89, 4B, 00, 00, 85, C0, 0F, 85, DD, 00, 00, 00, 89, 3D, 7B, 4B, 00, 00, 4C, 8D, 2D, D8, 2F, 00, 00, 48, 8D, 35, B9...
 
[+]

Entropy:
5.3923

Code size:
12.5 KB (12,800 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.