home

ui0detect.exe

Interactive services detection

Microsoft Corporation

It runs as a windows Service named “Interactive Services Detection”. It is included with the Windows 7 OS.
Publisher:
Microsoft Corporation

Product:
Microsoft® Windows® Operating System

Description:
Interactive services detection

 
Part of the Windows 7 Operating System

Version:
6.1.7600.16385 (win7_rtm.090713-1255)

MD5:
3cbdec8d06b9968aba702eba076364a1

SHA-1:
6e0fcaccadbdb5e3293aa3523ec1006d92191c58

SHA-256:
b8dab8aa804fc23021bfebd7ae4d40fbe648d6c6ba21cc008e26d1c084972f9b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
3/13/2025 4:17:23 PM UTC  (today)

File size:
40 KB (40,960 bytes)

Product version:
6.1.7600.16385

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
UI0Detect.exe.mui

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Windows\System32\ui0detect.exe

File PE Metadata
Compilation timestamp:
7/13/2009 7:52:35 PM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
768:VWp0fszQ7gGuiwJ8mQOsO+ueYuD+UYySV73q0OvObxziMMNpa8zOjFMMNv0/vM+J:lsU7ge4X6ZVC/VbqXGbxGMMW7MMs0+2w

Entry address:
0x504C

Entry point:
48, 83, EC, 28, E8, 5F, 02, 00, 00, 48, 83, C4, 28, E9, DA, FC, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, 99, 20, 00, 00, 75, 12, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 03, C2, 00, 00, 48, C1, C9, 10, E9, E0, 02, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, 48, 83, EC, 28, 48, 8B, 01, 81, 38, 63, 73, 6D, E0, 75, 2C, 83, 78, 18, 04, 75, 26, 8B, 40, 20, 3D, 20, 05, 93, 19, 74, 15, 3D, 21, 05, 93, 19, 74, 0E, 3D, 22, 05, 93, 19, 74, 07, 3D, 00, 40, 99, 01, 75, 07...
 
[+]

Entropy:
5.8039

Code size:
23.5 KB (24,064 bytes)

2 Services
Display name:
Interactive Services Detection

Service name:
UI0Detect

Description:
Enables user notification of user input for interactive services, which enables access to dialogs created by interactive services when they appear. If this service is stopped, notifications of new int

Type:
Win32OwnProcess, InteractiveProcess

Display name:
Rilevamento servizi interattivi

Service name:
UI0Detect

Description:
Attiva la notifica dell'input utente per i servizi interattivi, che consente di accedere alle finestre di dialogo create dai servizi interattivi quando vengono visualizzate. Se questo servizio viene a

Type:
Win32OwnProcess, InteractiveProcess


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.