Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.17031 (winblue_gdr.140221-1952) 14.44%
6.3.9600.16384 (winblue_rtm.130821-1623) 9.17%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.28%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.83%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.28%
6.2.9200.16384 (win8_rtm.120725-1247) 66.67%
6.2.9200.16384 (win8_rtm.120725-1247) 7.78%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.28%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.28%

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
ConvertStringSecurityDescriptorToSecurityDescriptorW, TraceMessage, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, RegisterTraceGuidsW, UnregisterTraceGuids, RegGetValueW, RegOpenKeyExW, DuplicateToken, EventWrite, SetThreadToken, ConvertSecurityDescriptorToStringSecurityDescriptorW, RegCloseKey
api-ms-win-core-errorhandling-l1-1-1.dll
GetLastError, SetUnhandledExceptionFilter, UnhandledExceptionFilter
api-ms-win-core-handle-l1-1-0.dll
DuplicateHandle, CloseHandle
api-ms-win-core-heap-l1-2-0.dll
HeapFree, HeapAlloc, GetProcessHeap
api-ms-win-core-heap-obsolete-l1-1-0.dll
LocalFree
api-ms-win-core-libraryloader-l1-1-1.dll
GetModuleHandleA, FreeLibrary, LoadLibraryExW, GetProcAddress
api-ms-win-core-libraryloader-l1-2-0.dll
GetModuleHandleA, FreeLibrary, LoadLibraryExW, GetProcAddress
api-ms-win-core-processthreads-l1-1-2.dll
OpenProcess, GetCurrentProcess, TerminateProcess, GetCurrentProcessId, GetCurrentThreadId, SetThreadToken
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegGetValueW, RegCloseKey, RegOpenKeyExW
api-ms-win-core-string-l1-1-0.dll
CompareStringOrdinal
api-ms-win-core-synch-l1-2-0.dll
ResetEvent, AcquireSRWLockExclusive, EnterCriticalSection, InitializeSRWLock, LeaveCriticalSection, ReleaseSRWLockExclusive, DeleteCriticalSection, CreateEventW, AcquireSRWLockShared, ReleaseSRWLockShared, SetEvent, Sleep, WaitForSingleObject, InitializeCriticalSection
api-ms-win-core-sysinfo-l1-2-1.dll
GetSystemTimeAsFileTime, GetTickCount
api-ms-win-core-threadpool-l1-2-0.dll
SubmitThreadpoolWork, WaitForThreadpoolWaitCallbacks, WaitForThreadpoolWorkCallbacks, CloseThreadpoolWork, CreateThreadpoolWork, CloseThreadpoolWait, SetThreadpoolWait, CreateThreadpoolWait
api-ms-win-devices-query-l1-1-1.dll
DevGetObjectPropertiesEx, DevFreeObjectProperties
api-ms-win-eventing-classicprovider-l1-1-0.dll
GetTraceLoggerHandle, UnregisterTraceGuids, TraceMessage, RegisterTraceGuidsW, GetTraceEnableLevel, GetTraceEnableFlags
api-ms-win-eventing-provider-l1-1-0.dll
EventWrite
api-ms-win-security-base-l1-2-0.dll
DuplicateToken
api-ms-win-security-sddl-l1-1-0.dll
ConvertStringSecurityDescriptorToSecurityDescriptorW, ConvertSecurityDescriptorToStringSecurityDescriptorW
kernel32.dll
WaitForSingleObject, CloseHandle, CloseThreadpoolWait, CreateThreadpoolWait, SetThreadpoolWait, InitializeSRWLock, AcquireSRWLockExclusive, ReleaseSRWLockExclusive, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, ResetEvent, LeaveCriticalSection, CreateThreadpoolWork, SubmitThreadpoolWork, WaitForThreadpoolWorkCallbacks, CloseThreadpoolWork, OpenProcess, DuplicateHandle, GetCurrentProcess, InterlockedIncrement, InterlockedDecrement, AcquireSRWLockShared, ReleaseSRWLockShared, HeapAlloc, WaitForThreadpoolWaitCallbacks, LocalFree, LoadLibraryExW, FreeLibrary, CompareStringOrdinal, TerminateProcess, UnhandledExceptionFilter, GetTickCount, GetSystemTimeAsFileTime, GetCurrentThreadId, GetCurrentProcessId, QueryPerformanceCounter, GetModuleHandleA, GetProcessHeap, SetUnhandledExceptionFilter, InterlockedCompareExchange, InterlockedExchange, Sleep, HeapFree, SetEvent, CreateEventW, GetLastError, GetProcAddress
msvcrt.dll
DllMain
rpcrt4.dll
NdrMesTypeEncode2, NdrAsyncServerCall, NdrServerCall2, RpcServerUseProtseqEpW, I_RpcMapWin32Status, RpcServerRegisterIf3, RpcServerUnregisterIfEx, RpcAsyncCompleteCall, MesEncodeIncrementalHandleCreate, MesIncrementalHandleReset, RpcExceptionFilter, MesHandleFree, I_RpcBindingInqLocalClientPID, RpcImpersonateClient, RpcRevertToSelf, I_RpcExceptionFilter, UuidFromStringW, NdrMesTypeAlignSize2, RpcSsDestroyClientContext, RpcStringFreeW, RpcStringBindingComposeW, RpcBindingFromStringBindingW, RpcBindingSetOption, RpcBindingFree, NdrClientCall2

dasHost.exe

Device Association Framework Provider Host by Microsoft

Remove dasHost.exe
Version:   6.2.8400.0 (winmain_win8rc.120518-1423)
MD5:   3f76e390ad551fd885f2c0e5b409a3c6
SHA1:   a9d51591dc29854d029643471e5dce90eaabce53
SHA256:   463b82d3fdc3ceba830c94fd22afae6fbde9d5f4f06a945b1fff930bcdd4f3e7
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is dasHost.exe?

Device Association Framework Provider Host enables pairing between the system and wired or wireless devices. This service is new for Windows 8.

Overview

dashost.exe executes as a process with the local user's privileges typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This version is installed on Windows 8 and is compiled as a 64 bit program.

DetailsDetails

File name:dashost.exe
Publisher:Microsoft Corporation
Product name:Device Association Framework Provider Host
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\dashost.exe
File version:6.2.8400.0 (winmain_win8rc.120518-1423)
Product version:6.2.8400.0
Size:65.5 KB (67,072 bytes)
Digital DNA
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details
Network connections
  • [UDP] listens on port 64383

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00120620%
    0.028634%
    Kernel CPU:0.00075696%
    0.013761%
    User CPU:0.00044924%
    0.014873%
    Kernel CPU time:9,204,059 ms/min
    100,923,805ms/min
    Memory
    Private memory:2.71 MB
    21.59 MB
    Private (maximum):7.05 MB
    Private (minimum):6.64 MB
    Non-paged memory:2.71 MB
    21.59 MB
    Virtual memory:41.78 MB
    140.96 MB
    Virtual memory (peak):42.29 MB
    169.69 MB
    Working set:6.95 MB
    18.61 MB
    Working set (peak):7.05 MB
    37.95 MB
    Resource allocations
    Threads:17
    12
    Handles:272
    600

    BehaviorsProcess properties

    Integrety level:System
    Platform:64-bit
    Command line:dashost.exe {5eb9a790-b019-4ffa-ae0bc62f2c5ea97d}
    Owner:User
    Parent process:svchost.exe (Host Process for Windows Services by Microsoft Corporation)

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 8 26.50%
    Windows 8.1 23.50%
    Windows 8 Pro 15.50%
    Windows 8.1 Pro 9.50%
    Windows 8 Single Language 5.50%
    Windows 8.1 Single Language 4.50%
    Windows 8 Pro with Media Center 3.50%
    Windows 8.1 Pro with Media Center 3.00%
    Windows 8 Enterprise 2.50%
    Windows 8.1 Enterprise 1.00%
    Windows 8.1 Pro Preview 1.00%
    Windows 8 Pro N 1.00%
    Windows 8.1 N 0.50%
    Windows 8.1 Enterprise Evaluation 0.50%
    Windows 8 Enterprise N 0.50%
    Windows 8 Enterprise Evaluation 0.50%
    Windows 8.1 Single Language Preview 0.50%
    Windows 8.1 Pro Preview with Media Center 0.50%

    Distribution by countryDistribution by country

    United States installs about 40.20% of Device Association Framework Provider Host.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Hewlett-Packard 16.41%
    ASUS 16.03%
    Lenovo 14.50%
    Acer 12.98%
    Dell 12.98%
    Toshiba 12.98%
    Sony 6.11%
    GIGABYTE 2.67%
    Intel 2.29%
    Samsung 1.91%
    Alienware 0.76%
    American Megatrends 0.38%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE