home

te.processhost.exe

Test Authoring and Execution Framework [v4.10]

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Test Authoring and Execution Framework [v4.10]

Version:
10.0.9922.0 (fbl_esc_tag.150115-1253)

MD5:
59de56144fc8b7bc8b21a79d66c4d12d

SHA-1:
8e25742cb5ee27eb4c6ab446d3633ba3821ecabc

SHA-256:
057e904ce5e804067e3b64e53ae8259fafcb39c0411666d2a04ae10aa6ad18e7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/26/2024 9:57:18 PM UTC  (today)

File size:
25.6 KB (26,200 bytes)

Product version:
10.0.9922.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
TE.ProcessHost

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\microsoft visual studio 14.0\common7\ide\commonextensions\microsoft\testwindow\te.processhost.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/22/2014 10:39:00 AM

Valid to:
7/22/2015 10:39:00 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000CA6CD5321235C4E1550001000000CA

File PE Metadata
Compilation timestamp:
1/15/2015 12:59:45 PM

OS version:
10.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
12.10

CTPH (ssdeep):
384:8XAD7+ToW6ooWbjNfx/B0GftpBj9A3tK+ILKHRN74Llh2B:tDSTIqlAib2Qm4f

Entry address:
0x1430

Entry point:
E8, C3, 02, 00, 00, E9, 2E, FE, FF, FF, CC, CC, CC, CC, CC, CC, 3B, 0D, 04, 20, 40, 00, 75, 03, C2, 00, 00, E9, 40, 04, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 8B, 45, 08, 8B, 00, 81, 38, 63, 73, 6D, E0, 75, 2B, 83, 78, 10, 03, 75, 25, 8B, 40, 14, 3D, 20, 05, 93, 19, 74, 15, 3D, 21, 05, 93, 19, 74, 0E, 3D, 22, 05, 93, 19, 74, 07, 3D, 00, 40, 99, 01, 75, 06, FF, 15, 38, 30, 40, 00, 33, C0, 5D, C2, 04, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC...
 
[+]

Entropy:
6.8933

Code size:
3 KB (3,072 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.