prevhost.exe
- File Path:
C:\Windows\SysWOW64\prevhost.exe
- Description: Preview Handler Surrogate Host
Hashes
| Type |
Hash |
| MD5 |
F6510F50CD47A9B324A6A1759265CFF1 |
| SHA1 |
78533509A2E269201ECAFB1808AB99C6871C0390 |
| SHA256 |
BF39153D7EE708F5AAE0746EC64F813F9BD3C345394641D8651ABA8161C9C039 |
| SHA384 |
709B58F188CDDCEF1351FA0BBD6282A8EDBDC2324FC43E77A997B85F9C1F1ADF92B6B75DFA96D37E5DBD75E86AB741EF |
| SHA512 |
B2D4F2A832B636997F2E72C0EAF4620D5CBF0C929095305DB4B62918E92E6EF90A5EC72DD7A3A7E4E25D14B1E39F540E1785A975E6D7D97BF5EC855674CDA145 |
| SSDEEP |
384:uZypIAkLlVlp+lfaTb16R//sOrQIwFxjxp6kmqt2J7ya+WFcWEV:cypIAk7pTC1rQIw7tzO7yal8 |
| IMP |
64AD0500B99B03083D39C3F6AFAF2C66 |
| PESHA1 |
680E692DEDD316772C4844EBD874196084FFF78D |
| PE256 |
A6E0EE5D129B7DABC3163896C21A98207CF91EB6376EDE1A1526EF52312C4706 |
Runtime Data
Loaded Modules:
| Path |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\wow64.dll |
| C:\Windows\System32\wow64cpu.dll |
| C:\Windows\System32\wow64win.dll |
| C:\Windows\SysWOW64\prevhost.exe |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: PREVHOST.EXE
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/75
- VirusTotal Link: https://www.virustotal.com/gui/file/bf39153d7ee708f5aae0746ec64f813f9bd3c345394641d8651aba8161c9c039/detection
MIT License. Copyright (c) 2020-2021 Strontic.