Should I block it?

No, this file is 100% safe to run.

Additional versions

6.0.6001.18000 (longhorn_rtm.080118-1840)	20.00%
6.0.6001.18000 (longhorn_rtm.080118-1840)	80.00%

(Note, Microsoft publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process

svchost.exe (Host Process for Windows Services by Microsoft Corporation)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegCloseKey, RegOpenKeyExA, RegQueryValueExA

kernel32.dll

InterlockedIncrement, InterlockedDecrement, SetEvent, MultiByteToWideChar, lstrlenA, CloseHandle, WaitForSingleObject, GetLastError, CreateEventW, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, GetStartupInfoA, InterlockedCompareExchange, Sleep, InterlockedExchange, UnhandledExceptionFilter

msvcrt.dll

DllMain

ole32.dll

CoInitializeEx, CoInitializeSecurity, CoRegisterSurrogate, CLSIDFromString, CoUninitialize, IIDFromString, CoRegisterClassObject, CoRevokeClassObject, CoReleaseMarshalData, CoMarshalInterface, CoCreateInstance, CoGetClassObject

IASHost.exe

IAS Host by Microsoft

Remove IASHost.exe

Version:	6.0.6001.18000 (longhorn_rtm.080118-1840)
MD5:	2a7af088b95d3a0b01a5c4bf49388a0b
SHA1:	3280619eb459c7de70688966fe2e2feef3e22615

This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

iashost.exe executes as a process with minimal NETWORK SERVICE privileges typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). and is compiled as a 32 bit program.

Details

File name:	iashost.exe
Publisher:	Microsoft Corporation
Product name:	IAS Host
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\iashost.exe
File version:	6.0.6001.18000 (longhorn_rtm.080118-1840)
Product version:	6.0.6001.18000
Size:	17 KB (17,408 bytes)
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.01097236%	0.028634%
Kernel CPU:	0.00194017%	0.013761%
User CPU:	0.00903219%	0.014873%
Kernel CPU time:	156,063 ms/min	100,923,805ms/min
CPU cycles:	201,121/sec	17,470,203/sec
Memory
Private memory:	8.57 MB	21.59 MB
Private (maximum):	9.29 MB
Private (minimum):	4.77 MB
Non-paged memory:	8.57 MB	21.59 MB
Virtual memory:	52.26 MB	140.96 MB
Virtual memory (peak):	54.58 MB	169.69 MB
Working set:	5.76 MB	18.61 MB
Working set (peak):	13.29 MB	37.95 MB
Page faults:	8,409/min	2,039/min
I/O
I/O read transfer:	70 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	9 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	66 Bytes/sec	448.09 KB/min
I/O other operations:	4/sec	1,671/min
Resource allocations
Threads:	2	12
Handles:	96	600

Process properties

Integrety level:	System
Platform:	32-bit
Command line:	C:\Windows\System32\iashost.exe {48da6741-1bf0-4a44-8325-293086c79077} -embedding
Owner:	NETWORK SERVICE
Parent process:	svchost.exe (Host Process for Windows Services by Microsoft Corporation)

Distribution by Windows OS

OS version	distribution
Windows Vista Home Premium	60.00%
Windows Vista Ultimate	20.00%
Windows Vista Home Basic	20.00%

Distribution by country

KE installs about 20.00% of IAS Host.

Distribution by PC manufacturer

PC Manufacturer	distribution
Sony	66.67%
Samsung	33.33%

Remove Adware and Spyware Programs, FREE Download!