services.exe
Services and Controller app by Microsoft
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Overview
There are 20 versions of services.exe in the wild, the latest version being 6.2.9200.16384 (win8_rtm.120725-1247). It is started as a Windows Service called 'Plug and Play' with the name 'PlugPlay' and described as “Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). This is executed as a shared service (which simply means that this service can share a process with other Win32 services). The average file size is about 249.97 KB. During the process's lifecycle, the typical CPU resource utilization is about 0.0047% including both foreground and background operations, the average private memory consumption is about 6.56 MB with the maximum memory reaching around 10.12 MB. Addionally, typically read and write I/O disk operations is about 9.52 KB per minute for reads and 26.75 KB per minute for writes.
What is services.exe?
Service Control Manager (SCM) is a special system process which starts, stops and interacts with Windows service processes. The SCM executable, Services.exe, runs as a Windows console program, and is launched by the Wininit process early during the system startup.
 Details
|
| File name: | services.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Services and Controller app |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Windows\System32\services.exe |
| Original name: | services.exe.mui |
| Windows Service |
| Service name: | PlugPlay |
| Display name: | Plug and Play |
| Description: | “Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.” |
| Type: | Win32ShareProcess |
Behaviors
(Note, the behaviors below are for all versions of services.exe, select a unique version for details.)
Services
Runs under 'SYSTEM\CurrentControlSet\Services' as a shared service by the Service Host (svchost.exe)
- 'PlugPlay' (Plug and Play)
- 'Eventlog' (Event Log)
- PlugPlay
- 'Eventlog' (Windows Event Log)
All file variations of services.exe
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
49.00% |
|
| Windows 7 Ultimate |
29.25% |
|
| Windows 7 Professional |
10.00% |
|
| Windows Vista Home Premium |
4.00% |
|
| Windows 7 Home Basic |
3.00% |
|
| Windows 7 Starter |
0.75% |
|
| Windows 8 Pro |
0.75% |
|
| Windows 7 Enterprise |
0.75% |
|
| Windows Seven Black Edition |
0.50% |
|
| Windows Vista Home Basic |
0.50% |
|
| Windows Vista Ultimate |
0.50% |
|
| Windows Se7en Titan |
0.25% |
|
| Windows 8 Pro with Media Center |
0.25% |
|
| Windows Vista Business |
0.25% |
|
| Windows 8 |
0.25% |
|
Distribution by country
United States installs about 39.65% of Services and Controller app.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
21.60% |
|
| Hewlett-Packard |
17.32% |
|
| ASUS |
17.13% |
|
| Acer |
12.85% |
|
| Toshiba |
9.31% |
|
| Sony |
6.33% |
|
| Lenovo |
4.10% |
|
| GIGABYTE |
2.79% |
|
| Samsung |
2.05% |
|
| Intel |
1.86% |
|
| MSI |
1.12% |
|
| Alienware |
0.74% |
|
| Medion |
0.74% |
|
| American Megatrends |
0.56% |
|
| Sahara |
0.37% |
|
| Gateway |
0.37% |
|
| NEC |
0.37% |
|
| Compaq |
0.37% |
|
