Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	8.12%
6.3.9600.16384 (winblue_rtm.130821-1623)	0.43%
6.3.9600.16384 (winblue_rtm.130821-1623)	12.82%
6.3.9431.0 (winmain_bluemp.130615-1214)	1.07%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.21%
6.2.9200.16420 (win8_gdr.120919-1813)	0.64%
6.2.9200.16420 (win8_gdr.120919-1813)	1.28%
6.2.9200.16420 (win8_gdr.120919-1813)	4.91%
6.2.9200.16420 (win8_gdr.120919-1813)	0.43%
6.2.9200.16420 (win8_gdr.120919-1813)	31.41%
6.2.9200.16420 (win8_gdr.120919-1813)	2.99%
6.2.9200.16420 (win8_gdr.120919-1813)	25.21%
6.2.9200.16420 (win8_gdr.120919-1813)	4.06%
6.2.9200.16384 (win8_rtm.120725-1247)	2.99%
6.2.9200.16384 (win8_rtm.120725-1247)	2.35%
6.2.8400.0 (winmain_win8rc.120518-1423)	1.07%

Relationships

PE file structure

Show functions

Import table

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence

api-ms-win-core-com-l1-1-0.dll

CoInitializeSecurity, CoCreateInstance, CoEnableCallCancellation, CoDisableCallCancellation, CoCancelCall, CoUninitialize, CoInitializeEx

api-ms-win-core-com-l1-1-1.dll

CoInitializeSecurity, CoCancelCall, CoDisableCallCancellation, CoEnableCallCancellation, CoCreateInstance, CoUninitialize, CoInitializeEx

api-ms-win-core-debug-l1-1-1.dll

IsDebuggerPresent, OutputDebugStringA

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI, DelayLoadFailureHook

api-ms-win-core-errorhandling-l1-1-1.dll

GetLastError, SetUnhandledExceptionFilter, UnhandledExceptionFilter, SetLastError

api-ms-win-core-handle-l1-1-0.dll

CloseHandle

api-ms-win-core-heap-l1-2-0.dll

GetProcessHeap, HeapDestroy, HeapAlloc, HeapSize, HeapReAlloc, HeapFree, HeapCreate

api-ms-win-core-heap-obsolete-l1-1-0.dll

LocalFree

api-ms-win-core-interlocked-l1-2-0.dll

InterlockedDecrement, InterlockedIncrement, InterlockedCompareExchange, InterlockedExchange

api-ms-win-core-libraryloader-l1-1-1.dll

LoadStringW, GetModuleHandleW, GetModuleHandleA

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleHandleW, LoadStringW, GetModuleHandleA

api-ms-win-core-processthreads-l1-1-1.dll

TerminateProcess, GetExitCodeThread, GetStartupInfoW, SetProcessShutdownParameters, GetCurrentProcess, GetCurrentThread, CreateThread, GetCurrentThreadId, SetThreadPriority, GetCurrentProcessId, GetThreadPriority

api-ms-win-core-processthreads-l1-1-2.dll

GetThreadPriority, TerminateProcess, GetCurrentProcess, GetExitCodeThread, GetCurrentThreadId, GetCurrentProcessId, SetProcessShutdownParameters, CreateThread, GetStartupInfoW, GetCurrentThread, SetThreadPriority

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter

api-ms-win-core-registry-l1-1-0.dll

RegGetValueW

api-ms-win-core-string-l1-1-0.dll

WideCharToMultiByte

api-ms-win-core-synch-l1-2-0.dll

EnterCriticalSection, ResetEvent, ReleaseSRWLockExclusive, AcquireSRWLockExclusive, WaitForSingleObject, InitializeSRWLock, SetEvent, InitializeCriticalSection, DeleteCriticalSection, LeaveCriticalSection, Sleep, InitOnceExecuteOnce, CreateEventW

api-ms-win-core-sysinfo-l1-2-0.dll

GetTickCount, GetSystemTimeAsFileTime

api-ms-win-core-sysinfo-l1-2-1.dll

GetTickCount, GetSystemTimeAsFileTime

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer, DeleteTimerQueueTimer

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableLevel, UnregisterTraceGuids, GetTraceLoggerHandle, GetTraceEnableFlags, TraceMessage, RegisterTraceGuidsW

api-ms-win-security-base-l1-2-0.dll

FreeSid, InitializeAcl, GetLengthSid, AllocateAndInitializeSid, GetSecurityDescriptorSacl, GetSecurityDescriptorDacl, GetSecurityDescriptorGroup, GetSecurityDescriptorOwner, GetSecurityDescriptorControl, SetSecurityDescriptorOwner, IsValidSid, InitializeSecurityDescriptor, MakeAbsoluteSD, GetSidSubAuthority, InitializeSid, GetSidLengthRequired, SetSecurityDescriptorGroup, SetSecurityDescriptorDacl, AddAce, GetAclInformation, CopySid

msvcrt.dll

DllMain

ntdll.dll

DbgPrintEx, EtwTraceMessage, NtSetInformationProcess, RtlUnhandledExceptionFilter

rpcrt4.dll

RpcAsyncCompleteCall, RpcAsyncInitializeHandle, RpcStringBindingComposeW, RpcBindingSetAuthInfoExW, RpcBindingFromStringBindingW, NdrAsyncClientCall, NdrClientCall2, RpcAsyncCancelCall, RpcBindingFree, RpcStringFreeW

taskhostex.exe

Host Process for Windows Tasks by Microsoft Corporation (Signed)

Remove taskhostex.exe

Version:	6.2.8400.0 (winmain_win8rc.120518-1423)
MD5:	e0e4911b3e59ce074bfd1dd5e9023871
SHA1:	0c39e305fc33834d2da59ae6dd4f353da3851e48
SHA256:	7feb5633998f93a51bba6e1c6b6022642241df9924e1a9526cf71152163d4c91

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is taskhostex.exe?

Host Process for Windows Tasks (TASKHOST) is a generic process which acts as a host for processes that run from DLLs rather than EXEs. At startup TASKHOST checks the Services portion of the Registry to construct a list of DLL-based services that it needs to load, and then loads them.

Overview

taskhostex.exe executes as a process with the local user's privileges. The file is digitally signed by Microsoft Corporation. This version is installed on Windows 8 and is compiled as a 32 bit program.

Details

File name:	taskhostex.exe
Publisher:	Microsoft Corporation
Product name:	Host Process for Windows Tasks
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\taskhostex.exe
Original name:	taskhostex.exe.mui
File version:	6.2.8400.0 (winmain_win8rc.120518-1423)
Product version:	6.2.8400.0
Size:	53 KB (54,272 bytes)
Certificate
Issued to:	Microsoft Corporation
Authority (CA):	Microsoft Corporation
Expiration date:	Tuesday, July 9, 2013
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Network connections

[UDP] listens on port 53748

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00256223%	0.028634%
Kernel CPU:	0.00121460%	0.013761%
User CPU:	0.00134763%	0.014873%
Kernel CPU time:	6,136,328 ms/min	100,923,805ms/min
CPU cycles:	108,449/sec	17,470,203/sec
Context switches:	2/sec	284/sec
Memory
Private memory:	3.97 MB	21.59 MB
Private (maximum):	9.49 MB
Private (minimum):	2.48 MB
Non-paged memory:	3.97 MB	21.59 MB
Virtual memory:	79.62 MB	140.96 MB
Virtual memory (peak):	87.68 MB	169.69 MB
Working set:	4.32 MB	18.61 MB
Working set (peak):	9.98 MB	37.95 MB
Page faults:	19,999/min	2,039/min
I/O
I/O read transfer:	1.66 KB/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	49.15 KB/sec	274.99 KB/min
I/O write operations:	2/sec	227/min
I/O other transfer:	148 Bytes/sec	448.09 KB/min
I/O other operations:	30/sec	1,671/min
Resource allocations
Threads:	8	12
Handles:	316	600
GUI GDI count:	11	103
GUI GDI peak:	13	142
GUI USER count:	9	49
GUI USER peak:	12	71

Process properties

Integrety level:	Medium
Platform:	32-bit
Command lines:	taskhost.exe taskhostex.exe taskhost.exe $(arg0)
Owner:	User
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads

Averages

ntdll.dll
Total CPU:	0.00368472%	0.272967%
Kernel CPU:	0.00000000%	0.107585%
User CPU:	0.00368472%	0.165382%
CPU cycles:	73,131/sec	5,741,424/sec
Memory:	1.39 MB	1.16 MB
ESENT.dll
Total CPU:	0.00172469%
Kernel CPU:	0.00086235%
User CPU:	0.00086235%
CPU cycles:	19,419/sec
Memory:	2.3 MB
MSCTF.dll
Total CPU:	0.00057338%
Kernel CPU:	0.00057338%
User CPU:	0.00000000%
CPU cycles:	8,211/sec
Memory:	876 KB
taskhostex.exe (Host Process for Windows Tasks by Microsoft)
Total CPU:	0.00028668%
Kernel CPU:	0.00028668%
User CPU:	0.00000000%
CPU cycles:	2,255/sec
Memory:	64 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Windows 8.1	27.00%
Windows 8	22.00%
Windows 8 Pro	14.50%
Windows 8.1 Pro	11.50%
Windows 8.1 Single Language	5.50%
Windows 8 Single Language	5.50%
Windows 8.1 Pro with Media Center	3.00%
Windows 8 Enterprise	2.50%
Windows 8.1 Pro Preview	2.00%
Windows 8 Enterprise N	1.50%
Windows 8 Pro with Media Center	1.50%
Windows 8.1 Enterprise	1.00%
Windows 8.1 N	0.50%
Windows 8.1 Enterprise Evaluation	0.50%
Windows 8 Enterprise Evaluation	0.50%
Windows 8 Pro N	0.50%
Windows 8.1 Single Language Preview	0.50%

Distribution by country

United States installs about 40.70% of Host Process for Windows Tasks.

Distribution by PC manufacturer

PC Manufacturer	distribution
Hewlett-Packard	14.50%
ASUS	14.50%
Lenovo	14.50%
Dell	12.98%
Acer	12.60%
Toshiba	12.21%
Sony	7.63%
Intel	4.58%
GIGABYTE	2.67%
Samsung	1.53%
Alienware	0.76%
Medion	0.76%
American Megatrends	0.76%

Remove Adware and Spyware Programs, FREE Download!