Additional versions

6.3.9431.0 (winmain_bluemp.130615-1214)	2.00%
6.2.9200.16384 (win8_rtm.120725-1247)	94.00%
6.2.9200.16384 (win8_rtm.120725-1247)	4.00%

Parent process

Related files

This is a Windows system installed file with Windows File Protection (WFP) enabled.

The wshost.exe process goes by the name COM Surrogate and the only time you're likely even to notice its existence is when it crashes and you get the message COM Surrogate has stopped working. The COM Surrogate is a sacrificial process for a COM object that is run outside of the process that requested it. It does this in case the process it is trying to run crashes and instead of crashing the calling process the COM Surrogate crashes instead and the calling program is uneffected.

wshost.exe executes as a process with the local user's privileges typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Microsoft Corporation. and is compiled as a 64 bit program.

CPU
Total CPU:	0.00268373%	0.028634%
User CPU:	0.00268373%	0.014873%
CPU cycles:	479,517/sec	17,470,203/sec
Memory
Private memory:	1.68 MB	21.59 MB
Private (maximum):	6.78 MB
Private (minimum):	6.7 MB
Non-paged memory:	1.68 MB	21.59 MB
Virtual memory:	61.58 MB	140.96 MB
Virtual memory (peak):	63.61 MB	169.69 MB
Working set:	6.73 MB	18.61 MB
Working set (peak):	6.8 MB	37.95 MB
I/O
I/O read transfer:	10.5 KB/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	770 Bytes/sec	274.99 KB/min
I/O write operations:	8/sec	227/min
I/O other transfer:	693 Bytes/sec	448.09 KB/min
I/O other operations:	212/sec	1,671/min
Resource allocations
Threads:	4	12
Handles:	119	600
GUI GDI count:	9	103
GUI GDI peak:	10	142
GUI USER count:	4	49
GUI USER peak:	5	71