Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process
Child processes
Related files

PE structurePE file structure
Show functions
Import table
api-ms-win-core-processthreads-l1-1-0.dll
TerminateProcess, GetCurrentProcess, OpenProcessToken, GetCurrentProcessId, GetCurrentThreadId
api-ms-win-security-base-l1-1-0.dll
SetSecurityDescriptorDacl, AddAccessAllowedAce, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, GetTokenInformation, InitializeSecurityDescriptor, GetLengthSid, InitializeAcl
api-ms-win-service-core-l1-1-0.dll
StartServiceCtrlDispatcherW, SetServiceStatus
api-ms-win-service-winsvc-l1-1-0.dll
RegisterServiceCtrlHandlerW
kernel32.dll
LocalAlloc, CloseHandle, DelayLoadFailureHook, GetProcAddress, GetLastError, FreeLibrary, InterlockedCompareExchange, LoadLibraryExA, InterlockedExchange, Sleep, SetUnhandledExceptionFilter, GetModuleHandleA, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, UnhandledExceptionFilter, DeactivateActCtx, LoadLibraryExW, ActivateActCtx, LeaveCriticalSection, lstrcmpW, EnterCriticalSection, RegCloseKey, RegOpenKeyExW, HeapSetInformation, lstrcmpiW, lstrlenW, LCMapStringW, RegQueryValueExW, ReleaseActCtx, CreateActCtxW, ExpandEnvironmentStringsW, GetCommandLineW, ExitProcess, SetProcessAffinityUpdateMode, RegDisablePredefinedCacheEx, InitializeCriticalSection, GetProcessHeap, SetErrorMode, RegisterWaitForSingleObjectEx, LocalFree, HeapFree, WideCharToMultiByte, HeapAlloc
msvcrt.dll
DllMain
ntdll.dll
RtlAllocateHeap, RtlLengthRequiredSid, RtlSubAuthoritySid, RtlInitializeSid, RtlCopySid, RtlSubAuthorityCountSid, RtlInitializeCriticalSection, RtlSetProcessIsCritical, RtlImageNtHeader, RtlUnhandledExceptionFilter, EtwEventWrite, EtwEventEnabled, EtwEventRegister, RtlFreeHeap
rpcrt4.dll
RpcMgmtSetServerStackSize, I_RpcMapWin32Status, RpcServerUnregisterIf, RpcMgmtWaitServerListen, RpcMgmtStopServerListening, RpcServerUnregisterIfEx, RpcServerRegisterIf, RpcServerUseProtseqEpW, RpcServerListen

svchost.exe

Proceso host para los servicios de Windows by Microsoft

Remove svchost.exe
Version:   6.1.7264.0 (win7_rtm.090622-1900)
MD5:   79f487aa916954a2e80d4d026a248efb
SHA1:   76bd6125dcc30b9ccc83f5a8c36f1d7a7cf51763
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

This version is designed to run on Windows 7 and is compiled as a 32 bit program.

DetailsDetails

File name:svchost.exe
Publisher:Microsoft Corporation
Product name:Proceso host para los servicios de Windows
Description:Sistema operativo Microsoft® Windows®
Typical file path:C:\Windows\System32\svchost.exe
Original name:svchost.exe.mui
File version:6.1.7264.0 (win7_rtm.090622-1900)
Product version:6.1.7264.0
Size:20.5 KB (20,992 bytes)
Build date:7/10/2009 11:07 PM
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Service
This is the shared Service Host controller that runs some of the following shared services:
  • Service name 'AeLookupSvc'
Network connections
  • [UDP] listens on port 60385
  • [UDP] listens on port 58195
  • [UDP] listens on port 4500

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00178714%
    0.028634%
    Kernel CPU:0.00077938%
    0.013761%
    User CPU:0.00100776%
    0.014873%
    Kernel CPU time:57,804 ms/min
    100,923,805ms/min
    Memory
    Private memory:18.31 MB
    21.59 MB
    Private (maximum):13.99 MB
    Private (minimum):11.93 MB
    Non-paged memory:18.31 MB
    21.59 MB
    Virtual memory:82.72 MB
    140.96 MB
    Virtual memory (peak):115.77 MB
    169.69 MB
    Working set:13.52 MB
    18.61 MB
    Working set (peak):42.9 MB
    37.95 MB
    Resource allocations
    Threads:18
    12
    Handles:481
    600

    BehaviorsProcess properties

    Integrety level:System
    Platform:32-bit
    Owner:User
    Parent process:services.exe (by Microsoft)

    ResourcesThreads

    Averages
     
    nlasvc.dll (Reconocimiento de ubicación de red 2 by Microsoft)
    Total CPU:0.12716373%
    0.272967%
    Kernel CPU:0.11666083%
    0.107585%
    User CPU:0.01050291%
    0.165382%
    CPU cycles:2,015,664/sec
    5,741,424/sec
    Memory:248 KB
    1.16 MB
    ntdll.dll
    Total CPU:0.06785083%
    Kernel CPU:0.04557415%
    User CPU:0.02227669%
    CPU cycles:1,283,123/sec
    Memory:1.23 MB
    mprtp.dll
    Total CPU:0.03276013%
    Kernel CPU:0.00187201%
    User CPU:0.03088812%
    CPU cycles:502,882/sec
    Memory:160 KB
    sechost.dll
    Total CPU:0.02689692%
    Kernel CPU:0.00585281%
    User CPU:0.02104411%
    CPU cycles:555,320/sec
    Memory:100 KB
    ssdpsrv.dll (DLL de servicio SSDP by Microsoft)
    Total CPU:0.00311676%
    Kernel CPU:0.00085895%
    User CPU:0.00225781%
    CPU cycles:79,372/sec
    Memory:168 KB
    mpssvc.dll (Servicio de protección de Microsoft (MPS) by Microsoft)
    Total CPU:0.00266391%
    Kernel CPU:0.00196116%
    User CPU:0.00070275%
    CPU cycles:43,547/sec
    Memory:564 KB
    radardt.dll
    Total CPU:0.00264862%
    Kernel CPU:0.00164914%
    User CPU:0.00099948%
    CPU cycles:38,448/sec
    Memory:96 KB
    dnsrslvr.dll (Servicio de resolución de almacenamiento en caché DNS by Microsoft)
    Total CPU:0.00247540%
    Kernel CPU:0.00223031%
    User CPU:0.00024509%
    CPU cycles:38,330/sec
    Memory:140 KB
    pcasvc.dll (Servicio de compatibilidad de programas by Microsoft)
    Total CPU:0.00229075%
    Kernel CPU:0.00224095%
    User CPU:0.00004980%
    CPU cycles:34,975/sec
    Memory:160 KB
    taskcomp.dll
    Total CPU:0.00171612%
    Kernel CPU:0.00137290%
    User CPU:0.00034322%
    CPU cycles:33,602/sec
    Memory:308 KB
    wevtsvc.dll
    Total CPU:0.00071042%
    Kernel CPU:0.00048994%
    User CPU:0.00022047%
    CPU cycles:11,540/sec
    Memory:1.05 MB
    msvcrt.dll
    Total CPU:0.00039307%
    Kernel CPU:0.00026205%
    User CPU:0.00013102%
    CPU cycles:4,753/sec
    Memory:688 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Ultimate 100.00%

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Dell 100.00%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE