Process
ubiquitoussigned
backgroundtaskhost.exe
File identity
File details
- File type
- PE32+ executable
- Magic
- PE32+ executable (GUI)
- Original name
- backgroundTaskHost.exe
- Internal name
- Background Task Host
- Product
- Microsoft® Windows® Operating System
Signing information
- Status
- Signed
- Publisher
- Microsoft Corporation
- Signer
- Microsoft Windows
- Issuer
- Microsoft Windows Production PCA 2011
- Signature rate
- 100%
File version1
10.0.26100.1 (WinBuild.160101.0800)100%
File size1
49.30 KB100%
Execution context
File paths1
C:\Windows\System32\backgroundTaskHost.exe100%
User context1
Interactive user100%
Integrity level1
AppContainer100%
Instances1
1100%
Session1
Session 1100%
Token privileges1
SeChangeNotifyPrivilege100%
Ancestry
Parents1
svchost.exe100%
Children0
Not observed.
Grandparents0
Not observed.
Grandchildren0
Not observed.
Behavior
Loaded modules50
apphelp.dll100%propsys.dll100%bcryptprimitives.dll100%shlwapi.dll100%aad.core.dll100%
Named pipes0
Not observed.
Process handles0
Not observed.
Command-line patterns1
"C:\WINDOWS\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProvider100%
Indicators
SHA-2561
b7d2c17e0038945aa4b72ae7a89e54d29b04ccc0feb62df5c9b7b67de43c2530100%VirusTotal·MalwareBazaar·Hybrid Analysis·ANY.RUN·Google
SHA-11
422ae532bc5ee74b13ee0be406a62c706b81f7ec100%VirusTotal·MalwareBazaar·Hybrid Analysis·ANY.RUN·Google
MD51
8bde0ae40012bd639fc60e494cc32356100%VirusTotal·MalwareBazaar·Hybrid Analysis·ANY.RUN·Google
Imphash1
dc601e2593053a84a6989de251407aa7100%VirusTotal·MalwareBazaar·Google
Analysis
About this process
No analyst write-up yet.
Security notes
No analyst write-up yet.
Anomaly signals
None defined yet.
Telemetry
OS prevalence1
Microsoft Windows 11 Enterprise Evaluation100%
Observation timeline
- First seen
- 2026-06-08
- Last seen
- 2026-06-08
- Machines
- 1
- Executions
- 1