Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9431.0 (winmain_bluemp.130615-1214) 2.00%
6.2.9200.16384 (win8_rtm.120725-1247) 94.00%
6.2.9200.16384 (win8_rtm.120725-1247) 4.00%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
api-ms-win-core-com-l1-1-0.dll
CoRegisterClassObject, CoRevokeClassObject, CoInitializeEx, CoUninitialize, CoInitializeSecurity, CoGetClassObject, CoFreeUnusedLibraries
api-ms-win-core-errorhandling-l1-1-1.dll
SetUnhandledExceptionFilter, UnhandledExceptionFilter, SetLastError, GetLastError
api-ms-win-core-file-l1-2-0.dll
WriteFile, UnlockFileEx, GetFileAttributesExW, DeleteFileW, SetFilePointer, CreateFileW, LockFileEx
api-ms-win-core-heap-l1-2-0.dll
HeapSetInformation
api-ms-win-core-interlocked-l1-2-0.dll
InterlockedDecrement, InterlockedIncrement, InterlockedCompareExchange, InterlockedExchange
api-ms-win-core-libraryloader-l1-1-1.dll
GetModuleHandleA
api-ms-win-core-processenvironment-l1-2-0.dll
ExpandEnvironmentStringsW
api-ms-win-core-processthreads-l1-1-1.dll
GetCurrentProcessId, GetCurrentThreadId, GetStartupInfoW, TerminateProcess, ExitProcess, GetCurrentProcess
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegGetValueW
api-ms-win-core-synch-l1-2-0.dll
LeaveCriticalSection, DeleteCriticalSection, Sleep, EnterCriticalSection, InitializeCriticalSection
api-ms-win-core-sysinfo-l1-2-0.dll
GetLocalTime, GetTickCount, GetSystemTimeAsFileTime
api-ms-win-shcore-thread-l1-1-0.dll
GetProcessReference, SetProcessReference
kernel32.dll
LocalFree, LocalAlloc
msvcrt.dll
DllMain
user32.dll
CreateWindowExW, TranslateMessage, PostQuitMessage, RegisterClassW, SetTimer, DestroyWindow, DefWindowProcW, GetMessageW, DispatchMessageW

WSHost.exe

COM Surrogate by Microsoft Corporation (Signed)

Remove WSHost.exe
Version:   6.2.9200.16384 (win8_rtm.120725-1247)
MD5:   93a992b7490e1d9402bcd24b8c4c485e
SHA1:   b8b4a2295c1400faa948818fb3f9d5a5ec1b8ee6
SHA256:   11f3e5247d702d24077ce0df53f4bdc9dc806f75e5e059ca970f256421063831
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is WSHost.exe?

The wshost.exe process goes by the name COM Surrogate and the only time you're likely even to notice its existence is when it crashes and you get the message COM Surrogate has stopped working. The COM Surrogate is a sacrificial process for a COM object that is run outside of the process that requested it. It does this in case the process it is trying to run crashes and instead of crashing the calling process the COM Surrogate crashes instead and the calling program is uneffected.

Overview

wshost.exe executes as a process with the local user's privileges typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Microsoft Corporation. This version is installed on Windows 8 and is compiled as a 32 bit program.

DetailsDetails

File name:wshost.exe
Publisher:Microsoft Corporation
Product name:COM Surrogate
Description:Microsoft® Windows® Operating System
Typical file path:C:\windows\winstore\wshost.exe
File version:6.2.9200.16384 (win8_rtm.120725-1247)
Product version:6.2.9200.16384
Size:23.08 KB (23,632 bytes)
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Effective date:Monday, April 9, 2012
Expiration date:Tuesday, July 9, 2013
Digital DNA
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00043947%
0.028634%
Kernel CPU:0.00023902%
0.013761%
User CPU:0.00020046%
0.014873%
Kernel CPU time:1,156 ms/min
100,923,805ms/min
CPU cycles:20,732/sec
17,470,203/sec
Memory
Private memory:3.42 MB
21.59 MB
Private (maximum):11.63 MB
Private (minimum):6.48 MB
Non-paged memory:3.42 MB
21.59 MB
Virtual memory:75.36 MB
140.96 MB
Virtual memory (peak):82.97 MB
169.69 MB
Working set:10.3 MB
18.61 MB
Working set (peak):11.76 MB
37.95 MB
Page faults:10,308/min
2,039/min
I/O
I/O read transfer:670 Bytes/sec
1.02 MB/min
I/O read operations:2/sec
343/min
I/O write transfer:332 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:24 Bytes/sec
448.09 KB/min
I/O other operations:2/sec
1,671/min
Resource allocations
Threads:8
12
Handles:322
600
GUI GDI count:9
103
GUI GDI peak:10
142
GUI USER count:9
49
GUI USER peak:28
71

BehaviorsProcess properties

Integrety level:Medium
Platform:32-bit
Command line:C:\windows\winstore\wshost.exe -embedding
Owner:User
Parent process:svchost.exe (Host Process for Windows Services by Microsoft Corporation)

ResourcesThreads

Averages
 
WSHost.exe (main module)
Total CPU:0.00011908%
0.272967%
Kernel CPU:0.00008019%
0.107585%
User CPU:0.00003889%
0.165382%
CPU cycles:2,536/sec
5,741,424/sec
Memory:32 KB
1.16 MB
ntdll.dll
Total CPU:0.00007401%
Kernel CPU:0.00007401%
User CPU:0.00000000%
CPU cycles:698/sec
Memory:1.4 MB
combase.dll
Total CPU:0.00000483%
Kernel CPU:0.00000000%
User CPU:0.00000483%
CPU cycles:265/sec
Memory:1.21 MB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 8 44.00%
Windows 8 Pro 34.00%
Windows 8 Pro with Media Center 14.00%
Windows 8 Enterprise 4.00%
Windows 8 Single Language 2.00%
Windows 8.1 Pro Preview 2.00%

Distribution by countryDistribution by country

United States installs about 65.31% of COM Surrogate.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Toshiba 26.09%
Hewlett-Packard 21.74%
Dell 17.39%
Acer 10.87%
Sony 8.70%
ASUS 8.70%
Intel 4.35%
American Megatrends 2.17%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE