taskhost.exe
Host Process for Windows Tasks by Microsoft Corporation (Signed)
Version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
MD5: | 639774c9acd063f028f6084abf5593ad |
SHA1: | 1ab1e31fe9f3347f68b1eee8ff02f525fc46ccc9 |
SHA256: | 9dfd80610cbbc9188f6c6bc85c87016b0ae42254fc289c2b578e85282bdd9c23 |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
What is taskhost.exe?
Host Process for Windows Tasks is a generic process which acts as a host for processes that run from DLLs rather than EXEs. At startup TASKHOST checks the Services portion of the Registry to construct a list of DLL-based services that it needs to load, and then loads them.
Overview
taskhost.exe executes as a process with the local user's privileges typically within the context of its parent
services.exe (Services and Controller app by Microsoft). The file is digitally signed by Microsoft Corporation. This version is designed to run on Windows 7 and is compiled as a 64 bit program.
Details
File name: | taskhost.exe |
Publisher: | Microsoft Corporation |
Product name: | Host Process for Windows Tasks |
Description: | Microsoft® Windows® Operating System |
Typical file path: | C:\Windows\System32\taskhost.exe |
Original name: | taskhost.exe.mui |
File version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
Product version: | 6.1.7600.16385 |
Size: | 67 KB (68,608 bytes) |
Certificate |
Issued to: | Microsoft Corporation |
Authority (CA): | Microsoft Corporation |
Expiration date: | Tuesday, July 9, 2013 |
Digital DNA |
Entropy: | 6.163300 |
File packed: | No |
Code language: | Microsoft Visual C++ |
.NET CLR: | No |
More details
Network connections
[TCP] 64.4.11.25:80
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.01222614% | |
Kernel CPU: | 0.00820866% | |
User CPU: | 0.00401748% | |
Kernel CPU time: | 5,535,913 ms/min | |
CPU cycles: | 1,414,592/sec | |
Context switches: | 14/sec | |
Memory |
Private memory: | 15 MB | |
Private (maximum): | 16.85 MB | |
Private (minimum): | 8.77 MB | |
Non-paged memory: | 15 MB | |
Virtual memory: | 377.13 MB | |
Virtual memory (peak): | 601.96 MB | |
Working set: | 12.82 MB | |
Working set (peak): | 19.39 MB | |
Page faults: | 1,241,509/min | |
I/O |
I/O read transfer: | 33.3 KB/sec | |
I/O read operations: | 2/sec | |
I/O write transfer: | 87.81 KB/sec | |
I/O write operations: | 4/sec | |
I/O other transfer: | 595 Bytes/sec | |
I/O other operations: | 191/sec | |
Resource allocations |
Threads: | 11 | |
Handles: | 283 | |
GUI GDI count: | 25 | |
GUI GDI peak: | 30 | |
GUI USER count: | 20 | |
GUI USER peak: | 25 | |
Process properties
Integrety level: | Medium |
Platform: | 64-bit |
Command lines: |
- "taskhost.exe"
- taskhost.exe $(arg0)
- taskhost.exe system
- taskhost.exe user
- taskhost.exe C:\Windows\System32\defrag.exe -c
- taskhost.exe C:\Windows\System32\rundll32.exe aepdu.dll,aepdurunupdate
|
Owner: | User |
Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
RacEngn.dll |
Total CPU: | 4.98241114% | |
Kernel CPU: | 0.01099494% | |
User CPU: | 4.97141620% | |
CPU cycles: | 148,773,027/sec | |
Context switches: | 10/sec | |
Memory: | 1.5 MB | |
ntdll.dll |
Total CPU: | 0.13658886% | |
Kernel CPU: | 0.11767637% | |
User CPU: | 0.01891249% | |
CPU cycles: | 3,418,362/sec | |
Context switches: | 3/sec | |
Memory: | 1.66 MB | |
ole32.dll |
Total CPU: | 0.00119931% | |
Kernel CPU: | 0.00117827% | |
User CPU: | 0.00002104% | |
CPU cycles: | 22,989/sec | |
Memory: | 2.01 MB | |
AuxiliaryDisplayServices.dll |
Total CPU: | 0.00087046% | |
Kernel CPU: | 0.00049968% | |
User CPU: | 0.00037077% | |
CPU cycles: | 31,347/sec | |
Memory: | 144 KB | |
taskhost.exe (main module) |
Total CPU: | 0.00086231% | |
Kernel CPU: | 0.00065664% | |
User CPU: | 0.00020567% | |
CPU cycles: | 21,818/sec | |
Memory: | 80 KB | |
MsCtfMonitor.dll |
Total CPU: | 0.00081785% | |
Kernel CPU: | 0.00058258% | |
User CPU: | 0.00023527% | |
CPU cycles: | 21,857/sec | |
Context switches: | 1/sec | |
Memory: | 44 KB | |
WINMM.dll |
Total CPU: | 0.00062882% | |
Kernel CPU: | 0.00033215% | |
User CPU: | 0.00029667% | |
CPU cycles: | 13,656/sec | |
Memory: | 236 KB | |
SHLWAPI.dll |
Total CPU: | 0.00045402% | |
Kernel CPU: | 0.00013103% | |
User CPU: | 0.00032300% | |
CPU cycles: | 8,467/sec | |
Memory: | 452 KB | |
ESENT.dll |
Total CPU: | 0.00044261% | |
Kernel CPU: | 0.00037513% | |
User CPU: | 0.00006748% | |
CPU cycles: | 9,193/sec | |
Memory: | 2.48 MB | |
HotStartUserAgent.dll |
Total CPU: | 0.00038337% | |
Kernel CPU: | 0.00027277% | |
User CPU: | 0.00011060% | |
CPU cycles: | 4,023/sec | |
Memory: | 44 KB | |
sqlcese30.dll |
Total CPU: | 0.00032821% | |
Kernel CPU: | 0.00031393% | |
User CPU: | 0.00001428% | |
CPU cycles: | 14,734/sec | |
Memory: | 464 KB | |
PlaySndSrv.dll |
Total CPU: | 0.00013745% | |
Kernel CPU: | 0.00011618% | |
User CPU: | 0.00002127% | |
CPU cycles: | 1,458/sec | |
Memory: | 96 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
OS version | distribution |
Windows 7 Home Premium |
45.50% |
|
Windows 7 Ultimate |
19.50% |
|
Windows 8.1 |
10.00% |
|
Windows 7 Professional |
8.00% |
|
Windows 8.1 Pro |
6.50% |
|
Windows 7 Home Basic |
2.50% |
|
Windows 8.1 Single Language |
2.00% |
|
Windows 8 |
2.00% |
|
Windows 8 Single Language |
1.50% |
|
Windows Seven Black Edition |
0.50% |
|
Windows 8.1 Enterprise Evaluation |
0.50% |
|
Windows 8.1 Pro with Media Center |
0.50% |
|
Windows 7 Starter |
0.50% |
|
Windows 8.1 Pro Preview |
0.50% |
|
Distribution by country
United States installs about 48.24% of Host Process for Windows Tasks.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Dell |
25.48% |
|
Hewlett-Packard |
18.92% |
|
ASUS |
17.76% |
|
Acer |
13.13% |
|
Toshiba |
8.49% |
|
Lenovo |
5.41% |
|
Sony |
5.41% |
|
GIGABYTE |
1.54% |
|
Medion |
1.54% |
|
Alienware |
1.16% |
|
Samsung |
0.77% |
|
Sahara |
0.39% |
|