prevhost.exe
- File Path:
C:\Windows\system32\prevhost.exe
- Description: Preview Handler Surrogate Host
Hashes
| Type |
Hash |
| MD5 |
3F4A1B67F58ED77745EDA2D57BD47458 |
| SHA1 |
A2C3E5B4EE3B422376A5DCF77D24C9D7B4DB6C09 |
| SHA256 |
A5E77D6C2D343DA645ACC660D45B15ACAAFEFBD091A2F18A0C5137655D848026 |
| SHA384 |
852F421C1B5EAE97AA2E4875EEBFDF9C339C5165C059D670993A1FD7ED6B2FF8FCCD1125EE82FC5EDF5301C84386A61A |
| SHA512 |
195E486776FE94499412803B08370CE0850CB9D1AB10033371E5DAD62B18A44EDE703C62B1B61113FFEC78C03DE1116BEADA6331496F8D5D7ACAB49FF81EC759 |
| SSDEEP |
768:dQTeTembVs9iswcQXD6VUPko7K24l4rjgTGQnPevyJSNtP:CTkhs9+c3OPKrl4vg6mmvywtP |
| IMP |
14E7A56CE14DAD875047D7EC617BC003 |
| PESHA1 |
4D71F6BA61D36C2104582BEA1FEB18903AD059C4 |
| PE256 |
8C37E053AC242E750B8281B10BE9A029FCBAE23403B2719B1370E6EC74D757A3 |
Runtime Data
Loaded Modules:
| Path |
| C:\Windows\System32\combase.dll |
| C:\Windows\System32\GDI32.dll |
| C:\Windows\System32\gdi32full.dll |
| C:\Windows\System32\KERNEL32.DLL |
| C:\Windows\System32\KERNELBASE.dll |
| C:\Windows\System32\msvcp_win.dll |
| C:\Windows\System32\msvcrt.dll |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\system32\prevhost.exe |
| C:\Windows\System32\RPCRT4.dll |
| C:\Windows\System32\SHELL32.dll |
| C:\Windows\System32\ucrtbase.dll |
| C:\Windows\System32\USER32.dll |
| C:\Windows\System32\win32u.dll |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: PREVHOST.EXE
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/76
- VirusTotal Link: https://www.virustotal.com/gui/file/a5e77d6c2d343da645acc660d45b15acaafefbd091a2f18a0c5137655d848026/detection
MIT License. Copyright (c) 2020-2021 Strontic.