Gridinsoft Logo

The uihost.exe (McAfee WebAdvisor(user level process)) File Analysis

Updated 2 months ago
Checked by Malaware Check
uihost.exe

Technical Analysis

File Name uihost.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-13 00:00:48 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
907,088
File Size (bytes)
2025-03-13
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
7b5f0624c6049a54874b681921327a21
SHA1
ea8cfe47de269bc6dc7e958d88cc30ce6166c1e7
SHA256
ca017da8f612bae23abebeee75240115c2c98a8374c1c1cd3f70f6a1a05c7530
SHA512
f49bf4dbd737e97726d433eea57bf58f68855d371a0beec862e46a9b79d4ae1f27a9524cc2d219f886631e481483f95f709e055c2155e4519e157b269d653af7
ImpHash
c97a2eaf982975f3b0c63776148d76e4

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x140056290
Compilation Time 2025-03-07 16:24:09
Checksum 0x000e0985 (Actual: 0x000e0985)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path C:\jenkins\workspace\ebAdvisor_WABinary_release_4.1.1@2\build\x64\Release\UIHost.pdb
Digital Signature OK
Imports 6 libraries
KERNEL32, USER32, ADVAPI32, SHELL32, ole32, SHLWAPI
Exports 0 functions
Resources 1 Resources
Sections 8 Sections

Version Information

▼
CompanyName McAfee, LLC
FileDescription McAfee WebAdvisor(user level process)
FileVersion 4,1,1,1011
InternalName UIHost Module
LegalCopyright Copyright © 2025 McAfee, LLC
OriginalFilename UIHost.exe
ProductName McAfee WebAdvisor
ProductVersion 4,1,1,0
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 665,484 bytes 665,600 bytes 6.45 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 3F46F180306F30FB6AE76525504160E8
.rdata 0x000a4000 158,256 bytes 158,720 bytes 5.26 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 70EE90C1543D6377F20CB52F0BC1A408
.data 0x000cb000 53,424 bytes 17,920 bytes 3.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0F794F1066C9409F84A710D3B7C3B81C
.pdata 0x000d9000 37,344 bytes 37,376 bytes 5.63 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 92166C29C95E7CE560778C2E4AF60BB0
.didat 0x000e3000 144 bytes 512 bytes 1.09 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C500E107BAEE0E49E2618E0E5BD323C6
_RDATA 0x000e4000 348 bytes 512 bytes 3.31 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ CE8433EDED59824D7F6DC30270565847
.rsrc 0x000e5000 888 bytes 1,024 bytes 2.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F43AE2F8831534DB8C473908FC155854
.reloc 0x000e6000 5,608 bytes 5,632 bytes 5.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 795E90D390DD02DD2B0A2D7EF81F0EB2

Resource Analysis

▼
Total Resources: 1 (788 bytes)
Resource Type Count Total Size Percentage
RT_VERSION 1 788 bytes
100%

Certificate Chain Analysis

▼
Certificate Information
Product McAfee WebAdvisor
Description McAfee WebAdvisor(user level process)
File Version 4,1,1,1011
Original Name UIHost.exe
Signing Date 04:31 PM 03/07/2025 (91 days ago)
Verification Status Signed
Signers McAfee, LLC; GlobalSign GCC R45 EV CodeSigning CA 2020; GlobalSign Code Signing Root R45
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name UIHost Module
Copyright Copyright © 2025 McAfee, LLC
Certificate Chain Summary
GlobalSign GCC R45 EV CodeSigning CA 2020 #1 Primary
Validity Period: 2020-07-28 00:00:00 → 2030-07-28 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 77 BD 0E 05 B7 59 0B B6 1D 47 61 53 1E 3F 75 ED
McAfee, LLC #2 Chain
Validity Period: 2023-10-13 14:08:48 → 2026-10-13 14:08:48
Signature Algorithm: sha256RSA
Serial Number: 47 E0 D8 57 8A B2 00 08 39 19 FA 11
DigiCert Timestamp 2024 #3 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware