Gridinsoft Logo

The servicehost.exe (McAfee WebAdvisor(service)) File Analysis

Updated 2 months ago
Checked by Malaware Check
servicehost.exe

Technical Analysis

File Name servicehost.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-12 23:00:44 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
929,792
File Size (bytes)
2025-03-12
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
b8ad29c9b16924f95e0a451531e913b0
SHA1
70b8b276acbc8f870ea38dfef63931892a0698f8
SHA256
db87add3292512bd9c4ba003871250164325e7ad52acaa1d81a0f7d7652fe6b5
SHA512
cd2042e2616b38bf5b083d1dc1810a6d109c4bd24745d77e715f854c9e63e69e5f62f0eca99e1b45c3e9c9668b89a595bc0a935306ab0ba5aa0ce591afd965ac
ImpHash
d8d54828bcf207d6ffc3a4b6c248e6fb

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x140057950
Compilation Time 2025-03-07 16:26:34
Checksum 0x000edea9 (Actual: 0x000edea9)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path C:\jenkins\workspace\ebAdvisor_WABinary_release_4.1.1@2\build\x64\Release\ServiceHost.pdb
Digital Signature OK
Imports 6 libraries
KERNEL32, USER32, ADVAPI32, SHELL32, ole32, SHLWAPI
Exports 0 functions
Resources 1 Resources
Sections 8 Sections

Version Information

▼
CompanyName McAfee, LLC
FileDescription McAfee WebAdvisor(service)
FileVersion 4,1,1,1011
InternalName ServiceHost Module
LegalCopyright Copyright © 2025 McAfee, LLC
OriginalFilename ServiceHost.exe
ProductName McAfee WebAdvisor
ProductVersion 4,1,1,0
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 682,316 bytes 682,496 bytes 6.45 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 52D7CBB026E7B6490E88090B75A0E73F
.rdata 0x000a8000 160,288 bytes 160,768 bytes 5.26 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 309E883E03CA26634D33CA9F07282172
.data 0x000d0000 57,520 bytes 18,432 bytes 3.41 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 8C148AF53B257BE3AA6189362A50045A
.pdata 0x000df000 39,432 bytes 39,936 bytes 5.56 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FDFE698AAA7B52EFC48E7161A4D211BE
.didat 0x000e9000 144 bytes 512 bytes 1.10 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 7A1203AFF1EB43A40B3DB4308D276D2F
_RDATA 0x000ea000 348 bytes 512 bytes 3.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4F49AEB8D1C993907B2BBB336EE678A4
.rsrc 0x000eb000 888 bytes 1,024 bytes 2.96 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0203E3961950AC6118B8C583B4027B63
.reloc 0x000ec000 5,800 bytes 6,144 bytes 5.36 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 8EBFAB8BF353894C9DF7EBA26D5795B2

Resource Analysis

▼
Total Resources: 1 (788 bytes)
Resource Type Count Total Size Percentage
RT_VERSION 1 788 bytes
100%

Certificate Chain Analysis

▼
Certificate Information
Product McAfee WebAdvisor
Description McAfee WebAdvisor(service)
File Version 4,1,1,1011
Original Name ServiceHost.exe
Signing Date 04:31 PM 03/07/2025 (90 days ago)
Verification Status Signed
Signers McAfee, LLC; GlobalSign GCC R45 EV CodeSigning CA 2020; GlobalSign Code Signing Root R45
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name ServiceHost Module
Copyright Copyright © 2025 McAfee, LLC
Certificate Chain Summary
GlobalSign GCC R45 EV CodeSigning CA 2020 #1 Primary
Validity Period: 2020-07-28 00:00:00 → 2030-07-28 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 77 BD 0E 05 B7 59 0B B6 1D 47 61 53 1E 3F 75 ED
McAfee, LLC #2 Chain
Validity Period: 2023-10-13 14:08:48 → 2026-10-13 14:08:48
Signature Algorithm: sha256RSA
Serial Number: 47 E0 D8 57 8A B2 00 08 39 19 FA 11
DigiCert Timestamp 2024 #3 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware