Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.2.9200.16384 (win8_rtm.120725-1247) 10.00%
6.2.9200.16384 (win8_rtm.120725-1247) 15.00%
6.1.7601.17562 (win7sp1_gdr.110217-1504) 40.00%
6.1.7601.17562 (win7sp1_gdr.110217-1504) 30.00%
6.1.7600.16385 (win7_rtm.090713-1255) 5.00%

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
kernel32.dll
SetEvent, WaitForSingleObject, GetProcAddress, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, CreateEventW, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, GetStartupInfoA, InterlockedCompareExchange, Sleep, InterlockedExchange, InterlockedDecrement, InterlockedIncrement, GetLastError, GetCurrentProcessId, HeapSetInformation, GetModuleHandleW
msvcrt.dll
DllMain
ntdll.dll
RtlUnwind
ole32.dll
CoRegisterSurrogate, CLSIDFromString, CoUninitialize, CoRegisterClassObject, CoInitializeSecurity, CoCreateInstance, CoRevokeClassObject, CoMarshalInterThreadInterfaceInStream, CoGetInterfaceAndReleaseStream, CoInitializeEx, CoFreeUnusedLibraries
user32.dll
TranslateMessage, MsgWaitForMultipleObjects, DispatchMessageW, PeekMessageW

PREVHOST.exe

Preview Handler Surrogate Host by Microsoft

Remove PREVHOST.exe
Version:   6.1.7600.16385 (win7_rtm.090713-1255)
MD5:   290aaf21b681b4e7d6c8abbf02beb06b
SHA1:   a52b4b04b50376c35ebed7f8accf02229c40bf6b
SHA256:   1a38a279ffb4787037e634ba5d608d82d8f253f894fa5655bb537b2b03b3d6d7
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

prevhost.exe executes as a process with the local user's privileges typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). This version is designed to run on Windows 7 and is compiled as a 32 bit program.

DetailsDetails

File name:prevhost.exe
Publisher:Microsoft Corporation
Product name:Preview Handler Surrogate Host
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\prevhost.exe
File version:6.1.7600.16385 (win7_rtm.090713-1255)
Product version:6.1.7600.16385
Size:30.5 KB (31,232 bytes)
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00001006%
0.028634%
Kernel CPU:0.00000601%
0.013761%
User CPU:0.00000405%
0.014873%
Kernel CPU time:47 ms/min
100,923,805ms/min
CPU cycles:655/sec
17,470,203/sec
Memory
Private memory:1.37 MB
21.59 MB
Private (maximum):4.9 MB
Private (minimum):4.89 MB
Non-paged memory:1.37 MB
21.59 MB
Virtual memory:48.77 MB
140.96 MB
Virtual memory (peak):61.36 MB
169.69 MB
Working set:4.9 MB
18.61 MB
Working set (peak):8.42 MB
37.95 MB
Page faults:2,534/min
2,039/min
I/O
I/O read transfer:0 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O other transfer:0 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:4
12
Handles:90
600
GUI GDI count:17
103
GUI GDI peak:20
142
GUI USER count:12
49
GUI USER peak:16
71

BehaviorsProcess properties

Integrety level:Low
Platform:32-bit
Command line:C:\Windows\System32\prevhost.exe {914feed8-267a-4baa-b8aa-21e233792679} -embedding
Owner:User
Parent process:svchost.exe (Host Process for Windows Services by Microsoft Corporation)

ResourcesThreads

Averages
 
prevhost.exe (main module)
Total CPU:0.00001223%
0.272967%
Kernel CPU:0.00000408%
0.107585%
User CPU:0.00000816%
0.165382%
CPU cycles:187/sec
5,741,424/sec
Memory:44 KB
1.16 MB
SHLWAPI.dll
Total CPU:0.00000816%
Kernel CPU:0.00000816%
User CPU:0.00000000%
CPU cycles:208/sec
Memory:348 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 40.00%
Windows 8 Pro 20.00%
Windows 7 Professional 20.00%
Windows 7 Ultimate 15.00%
Windows 8 5.00%

Distribution by countryDistribution by country

United States installs about 55.00% of Preview Handler Surrogate Host.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 33.33%
GIGABYTE 22.22%
Hewlett-Packard 22.22%
Intel 11.11%
Acer 5.56%
Alienware 5.56%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE