Boost Connect

Uncovering the DNA of programs.

Good programs

Fair programs

Bad programs

What is svchost.exe?

Part of Host Process for Windows Services by Microsoft

What is it?

Host Process for Windows Tasks is a generic process which acts as a host for processes that run from DLLs rather than EXEs. At startup TASKHOST checks the Services portion of the Registry to construct a list of DLL-based services that it needs to load, and then loads them.

(svchost.exe is a system file that is installed with Windows)

Download Boost (100% FREE) Speed up Host Process for Windows Services and optimize your PC.

How does svchost.exe run?

Service - svchost.exe runs as a background Windows service (QQPCFixSvc). This is a system service that is installed with the Windows operating system and protected with Window's File Protection. This service runs as the LOCAL SERVICE account with minimum privileges on the local computer and presents anonymous credentials on the network.

How does svchost.exe start?

Driver - svchost.exe is typically associtated with identifier name of 1394hub. A device driver or software driver is a computer program allowing higher-level computer programs to interact with a hardware device.

Host Process for Windows Services is loaded by:

svchost.exe (Host Process for Windows Services by Microsoft)

Community

What is the community is seeing?	What is the community is doing?
About 0.4% of all Boost users have the svchost.exe process running.	Of the 0.4% of svchost.exe users, less than 1% have disabled it.

How resource intensive is svchost.exe?

Comparison based on the average resource utilization across all programs.

0.00003% CPU273.7%

Average CPU utilization across all programs is 0.00001%.

12.93 MB RAM60.0%

Average private memory utilization across all programs is 21.53 MB.

44 /min2.0%

Average I/O read and write operations for all programs is 2,253 per minute.

Typical file (disk image) location:

C:\Windows\System32\svchost.exe

Are there other versions of Host Process for Windows Servi...?

svchost.exe - version 6.3.9600.16384 (winblue_rtm.130821-1623)

svchost.exe - version 6.3.9431.0 (winmain_bluemp.130615-1214)

svchost.exe - version 6.2.9200.16384 (win8_rtm.120725-1247)

svchost.exe - version 6.2.8400.0 (winmain_win8rc.120518-1423)

svchost.exe - version 6.2.8250.0 (winmain_win8beta.120217-1520)

svchost.exe - version 6.2.8102.0 (winmain_win8m3.110823-1455)

svchost.exe - version 6.1.7600.16385 (win7_rtm.090713-1255)

svchost.exe - version 6.0.6000.16386 (vista_rtm.061101-2205)

What modules are loaded?

A module is a dynamic link library (DLL) or an executable file that is loaded into the process. Below is a list of non-system modules that are loaded by Host Process for Windows Services.

audiosrv.dll (Windows Audio Service by Microsoft)

lmhsvc.dll (TCPIP NetBios Transport Services DLL by Microsoft)

wiaservc.dll (Still Image Devices Service by Microsoft)

mpssvc.dll (Microsoft Protection Service by Microsoft)

dnsrslvr.dll (DNS Caching Resolver Service by Microsoft)

mmcss.dll (Multimedia Class Scheduler Service by Microsoft)

profsvc.dll (ProfSvc by Microsoft)

shsvcs.dll (Windows Shell Services Dll by Microsoft)

sens.dll (System Event Notification Service (SENS) by Microsoft)

eapsvc.dll (Microsoft EAPHost service by Microsoft)

aelupsvc.dll (Application Experience Service by Microsoft)

wmisvc.dll (WMI by Microsoft)

iphlpsvc.dll (Service that offers IPv6 connectivity over an IPv4 network. by Microsoft)

uxsms.dll (Microsoft User Experience Session Management Service by Microsoft)

wudfsvc.dll (Windows Driver Foundation - User-mode Driver Framework Service by Microsoft)

wlansvc.dll (Windows WLAN AutoConfig Service DLL by Microsoft)

pcasvc.dll (Program Compatibility Assistant Service by Microsoft)

netman.dll (Network Connections Manager by Microsoft)

es.dll (COM+ by Microsoft)

nsisvc.dll (Network Store Interface RPC server by Microsoft)

wkssvc.dll (Workstation Service DLL by Microsoft)

sstpsvc.dll (Provides the facility of using Secure Socket Tunneling Protocol (SSTP) to connect to remote computers (using VPN). by Microsoft)

upnphost.dll (UPnP Device Host by Microsoft)

umpnpmgr.dll (User-mode Plug-and-Play Service by Microsoft)

dhcpcore.dll (DHCP Client Service by Microsoft)

provsvc.dll (Windows HomeGroup by Microsoft)

ipsecsvc.dll (Windows IPsec SPD Server DLL by Microsoft)

themeservice.dll (Windows Shell Theme Service Dll by Microsoft)

umpo.dll (User-mode Power Service by Microsoft)

netprofm.dll (Network List Manager by Microsoft)

fdphost.dll (Function Discovery Provider host service by Microsoft)

hidserv.dll (HID Service by Microsoft)

What else is related?

dbgsvc.exe (Debug Diagnostic Tool by Microsoft)

fhautoplay.dll (Microsoft® File History AutoPlay Integration Library by Microsoft)

buildnotification.exe (Microsoft® Visual Studio® 2012 by Microsoft)

ehexthost.exe (Media Center Extensibility Host by Microsoft)

onenoteim.exe (Microsoft OneNote by Microsoft)

powershell.exe (Windows PowerShell by Microsoft)

gnsdk_fp.dll (Gracenote SDK by Microsoft)

ipoverusbsvc.exe (Microsoft (R) Windows (R) Operating System by Microsoft)

iedvtool.dll (Internet Explorer by Microsoft)

korime.exe (Microsoft IME by Microsoft)

chtime.exe (Microsoft IME by Microsoft)

emet_ce.dll (by Microsoft)

emet_gui.exe (Enhanced Mitigation Experience Toolkit by Microsoft)

emet_agent.exe (Enhanced Mitigation Experience Toolkit by Microsoft)

wallpaper.dll (by Microsoft)

bdsurrogatehost.exe (Bing Desktop by Microsoft)

filemanager.exe (OneDrive by Microsoft)

mstore.exe (Microsoft Clip Organizer by Microsoft)

chsime.exe (Microsoft IME by Microsoft)

scardsvr.dll (Smart Card Resource Management Server by Microsoft)

gpsvc.dll (Group Policy Client by Microsoft)

certprop.dll (Microsoft Smartcard Certificate Propagation Service by Microsoft)

What Windows OS versions does this run on?

Windows 7 Home Premium (6.1.7601.65536)

About Microsoft Corporation

Microsoft, founded in 1975 by Bill Gates and Paul Allen, is a veteran software company, best known for its Microsoft Windows operating system and the Microsoft More...

www.microsoft.com

Download Boost

File details

File name: svchost.exe

Publisher: Microsoft Corporation

Name: Host Process for Windows Services

Description: Microsoft® Windows® Operating System

Version: 6.1.7600.16385 (win7_rtm.090713-1255)

Product version: 6.1.7600.16385

Original file name: svchost.exe.mui

Windows file protection: Yes

Digital certificate

Issued to: Microsoft Corporation

Certificate authority: Microsoft Corporation

Expiration date: 6/13/2014

Resource utilization

CPU utilization averages

Total CPU: 0.0000679292%

Privileged CPU: 0.0000405613%

User CPU: 0.00002736794478%

Privileged CPU time: 473591.74 ms

Privileged CPU time /min: 126 ms

CPU cycle count: 273,571,011

CPU cycle count /min: 1,553,311

Memory utilization averages

Committed memory: 106.85 MB

Peak committed memory: 164.45 MB

Paged memory: 12.93 MB

Peak paged memory: 29.72 MB

Paged system memory: 99.31 KB

Non-paged system memory: 22.47 KB

Working set memory: 11.38 MB

Peak working set memory: 28.35 MB

Min working set memory: 540 KB

Private memory: 12.93 MB

Page faults: 1,074,694

Page faults /min: 286

Process I/O averages

Total read operations: 150,556

Read operations /min: 40

Total read transfer: 381.06 MB

Read transfer /min: 104.04 KB

Total write operations: 13,129

Write operations /min: 4

Total write transfer: 27.79 MB

Write transfer /min: 7.59 KB

Total other operations: 5,167,216

Other operations /min: 1,378

Total other transfer: 138.03 MB

Other Transfer /min: 37.69 KB

Resources

Handle count average: 342

Thread count average: 12

Thread resource averages

ntdll.dll

wevtsvc.dll

mmdevapi.dll

schedsvc.dll

wudfsvc.dll

svchost.exe

Process details

Runs as (owner): Local Service

Windows platform: 64-bit

Runs as a service: Yes

Parent Process

services.exe (Services and Controller app by Microsoft)

Child Processes

taskeng.exe (Task Scheduler Engine by Microsoft)

wudfhost.exe (Windows Driver Foundation - User-mode Driver Framework Host Process by Microsoft)

Process Commands

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k NetworkService

C:\Windows\system32\svchost.exe -k DcomLaunch

Hosted services

AcfXAudioService

ActiveX Installer (AxInstSV) (AxInstSV)

AeLookupSvc

Akamai

AllUserInstallAgent

AppHostSvc

AppIDSvc

Appinfo

Application Experience (AeLookupSvc)

Application Management (AppMgmt)

AppMgmt

AppReadiness

AppXSvc

ASBroker

ASChannel

AudioEndpointBuilder

AudioSrv

AxInstSV

Background Intelligent Transfer Service (BITS)

Base Filtering Engine (BFE)

BDESVC

BFE

BITS

Bluetooth Support Service (bthserv)

BranchCache (PeerDistSvc)

BrokerInfrastructure

Browser

BsBackup

BsCache

BsFileScan

BsFire

BsMailProxy

BsMain

BthHFSrv

bthserv

Certificate Propagation (CertPropSvc)

CertPropSvc

Cryptographic Services (CryptSvc)

CryptSvc

CscService

DCOM Server Process Launcher (DcomLaunch)

DcomLaunch

defragsvc

Desktop Window Manager Session Manager (UxSms)

DeviceAssociationService

DeviceInstall

Dhcp

DHCP Client (Dhcp)

Diagnostic Policy Service (DPS)

Diagnostic Service Host (WdiServiceHost)

Diagnostic System Host (WdiSystemHost)

Distributed Link Tracking Client (TrkWks)

DNS Client (Dnscache)

Dnscache

dot3svc

DPS

drvsvc

DsmSvc

EapHost

ehstart

EMDMgmt

Eventlog

EventSystem

Extensible Authentication Protocol (EapHost)

ezGOSvc

ezSharedSvc

fdPHost

FDResPub

fhsvc

FontCache

ftpsvc

Function Discovery Resource Publication (FDResPub)

FunshionSvr

getPlusHelper

gpsvc

Health Key and Certificate Management (hkmsvc)

HFGService

hidserv

hkmsvc

HomeGroup Listener (HomeGroupListener)

HomeGroup Provider (HomeGroupProvider)

HomeGroupListener

HomeGroupProvider

HPHNDUSVC

hpqcxs08

hpqddsvc

HPSLPSVC

HsfXAudioService

Human Interface Device Access (hidserv)

IKE and AuthIP IPsec Keying Modules (IKEEXT)

IKEEXT

Internet Connection Sharing (ICS) (SharedAccess)

IP Helper (iphlpsvc)

IPBusEnum

iphlpsvc

iprip

IPsec Policy Agent (PolicyAgent)

Irmon

Journal d’événements Windows (eventlog)

KtmRm

KtmRm for Distributed Transaction Coordinator (KtmRm)

LanmanServer

LanmanWorkstation

lfsvc

Link-Layer Topology Discovery Mapper (lltdsvc)

lltdsvc

lmhosts

LPDSVC

LSM

Mcx2Svc

Media Center Extender Service (Mcx2Svc)

METrsptSvr

MHN

Microsoft iSCSI Initiator Service (MSiSCSI)

Microsoft Software Shadow Copy Provider (swprv)

MMCSS

MpsSvc

MSiSCSI

MsKeyboardFilter

Multimedia Class Scheduler (MMCSS)

napagent

Network connectivity

TCP: localhost on port 1026

TCP: localhost on port 135

TCP: localhost on port 1027

Image hashes

MD5: dfde777faf31dc25e3624e8071073146

SHA-1: 73a63279a2e065babb9460777678897877d29945

PE image details

Langauge*: Microsoft Visual C++

File entropy: 5.87847

Import Table

advapi32.dll View import functions for advapi32.dll

api-ms-win-core-crt-l1-1-0.dll View import functions for api-ms-win-core-crt-l1-1-0.dll

api-ms-win-core-crt-l2-1-0.dll View import functions for api-ms-win-core-crt-l2-1-0.dll

api-ms-win-core-delayload-l1-1-1.dll View import functions for api-ms-win-core-delayload-l1-1-1.dll

api-ms-win-core-errorhandling-l1-1-0.dll View import functions for api-ms-win-core-errorhandling-l1-1-0.dll

api-ms-win-core-errorhandling-l1-1-1.dll View import functions for api-ms-win-core-errorhandling-l1-1-1.dll

api-ms-win-core-handle-l1-1-0.dll View import functions for api-ms-win-core-handle-l1-1-0.dll

api-ms-win-core-heap-l1-1-0.dll View import functions for api-ms-win-core-heap-l1-1-0.dll

api-ms-win-core-heap-l1-2-0.dll View import functions for api-ms-win-core-heap-l1-2-0.dll

api-ms-win-core-heap-obsolete-l1-1-0.dll View import functions for api-ms-win-core-heap-obsolete-l1-1-0.dll

api-ms-win-core-libraryloader-l1-1-1.dll View import functions for api-ms-win-core-libraryloader-l1-1-1.dll

api-ms-win-core-libraryloader-l1-2-0.dll View import functions for api-ms-win-core-libraryloader-l1-2-0.dll

api-ms-win-core-localization-l1-1-1.dll View import functions for api-ms-win-core-localization-l1-1-1.dll

api-ms-win-core-localization-l1-2-0.dll View import functions for api-ms-win-core-localization-l1-2-0.dll

api-ms-win-core-localization-l1-2-1.dll View import functions for api-ms-win-core-localization-l1-2-1.dll

api-ms-win-core-processenvironment-l1-1-0.dll View import functions for api-ms-win-core-processenvironment-l1-1-0.dll

api-ms-win-core-processenvironment-l1-1-1.dll View import functions for api-ms-win-core-processenvironment-l1-1-1.dll

api-ms-win-core-processenvironment-l1-2-0.dll View import functions for api-ms-win-core-processenvironment-l1-2-0.dll

api-ms-win-core-processthreads-l1-1-0.dll View import functions for api-ms-win-core-processthreads-l1-1-0.dll

api-ms-win-core-processthreads-l1-1-1.dll View import functions for api-ms-win-core-processthreads-l1-1-1.dll

api-ms-win-core-processthreads-l1-1-2.dll View import functions for api-ms-win-core-processthreads-l1-1-2.dll

api-ms-win-core-profile-l1-1-0.dll View import functions for api-ms-win-core-profile-l1-1-0.dll

api-ms-win-core-registry-l1-1-0.dll View import functions for api-ms-win-core-registry-l1-1-0.dll

api-ms-win-core-sidebyside-l1-1-0.dll View import functions for api-ms-win-core-sidebyside-l1-1-0.dll

api-ms-win-core-string-l1-1-0.dll View import functions for api-ms-win-core-string-l1-1-0.dll

api-ms-win-core-string-obsolete-l1-1-0.dll View import functions for api-ms-win-core-string-obsolete-l1-1-0.dll

api-ms-win-core-synch-l1-1-1.dll View import functions for api-ms-win-core-synch-l1-1-1.dll

api-ms-win-core-synch-l1-2-0.dll View import functions for api-ms-win-core-synch-l1-2-0.dll

api-ms-win-core-sysinfo-l1-1-1.dll View import functions for api-ms-win-core-sysinfo-l1-1-1.dll

api-ms-win-core-sysinfo-l1-2-0.dll View import functions for api-ms-win-core-sysinfo-l1-2-0.dll

api-ms-win-core-sysinfo-l1-2-1.dll View import functions for api-ms-win-core-sysinfo-l1-2-1.dll

api-ms-win-core-threadpool-l1-1-1.dll View import functions for api-ms-win-core-threadpool-l1-1-1.dll

api-ms-win-core-threadpool-private-l1-1-0.dll View import functions for api-ms-win-core-threadpool-private-l1-1-0.dll

api-ms-win-obsolete-kernelbase-l1-1-0.dll View import functions for api-ms-win-obsolete-kernelbase-l1-1-0.dll

api-ms-win-security-base-l1-1-0.dll View import functions for api-ms-win-security-base-l1-1-0.dll

api-ms-win-security-base-l1-2-0.dll View import functions for api-ms-win-security-base-l1-2-0.dll

api-ms-win-service-core-l1-1-0.dll View import functions for api-ms-win-service-core-l1-1-0.dll

api-ms-win-service-core-l1-1-1.dll View import functions for api-ms-win-service-core-l1-1-1.dll

api-ms-win-service-winsvc-l1-1-0.dll View import functions for api-ms-win-service-winsvc-l1-1-0.dll

api-ms-win-service-winsvc-l1-2-0.dll View import functions for api-ms-win-service-winsvc-l1-2-0.dll

kernel32.dll View import functions for kernel32.dll

msvcrt.dll

ntdll.dll

rpcrt4.dll View import functions for rpcrt4.dll

Stay up to date with news about Boost

Subscribe to our newsletter to receive the latest Boost news and discounts.