Files signed by Microsoft Windows Publisher

Microsoft Windows Publisher

Microsoft Windows Publisher is a digital signature publisher name observed in ThreatInfo records. This page groups 30 signed files and shows whether those files are currently classified as clean, undefined, or detected.

A digital signature can help identify a publisher, but it does not always prove that a file is safe. Certificates may be abused, stolen, expired, or attached to modified installers, so the file hash and detection status should be checked together.

svchost.exb 8497852ed44aff902d502015792d315d Clean
smss.exb 5e06bdf5f57d4fc240c2d05e3f0d9729 Clean
lsass.exb 28f844500ada77447835bc586f15aaae Clean
csrss.exb 3e7ccd0f507877c50078205667ce8133 Clean
2POidULKbzxAqMfjmcZVO1YeUO6h.e 425e22d9f5c01616afc92987791b19e9 Clean
svchost.exb 3120b24060924f9b94182a1432b2d7f9 Clean
services.exb 6ff8248f3a9d69a095c7f3f42bc29cb2 Clean
8BA898.exe 1f8434dd4907c832e6e90d6298eab85b Clean
services.exe 4fc239921a238e7c55934b2b2a73ce9d Clean
svchost.exe d0abc231c0b3e88c6b612b28abbf734d Clean
services.exb c81f9707dea008eed4071b5a39b7c76e Clean
svchost.exb 440684c4f823aae2cc587363f9c477a6 Clean
services.exb ab75687641c9adbe22336ec3c496909c Clean
csrss.exb 4e043fe41901f1ea1b0fccef3c077c56 Clean
smss.exb f3dc4781c85bf8cb5716d5086511802b Clean
lsass.exb 94e06d509d50807774f35bee3163e806 Clean
lsass.exb 889459f1fddc5ec58b437aa6c436f33f Clean
smss.exb c2c989b9ec32183a7baf5c0d59a57042 Clean
svchost.exe 8a0a29438052faed8a2532da50455756 Clean
svchost.exe 9520a99e77d6196d0d09833146424113 Clean
svchost.exe a7296c1245ee76768d581c6330dade06 Clean
csrss.exb 23019322ffecb179746210be52d6de60 Clean
svchost.exe 95043977365cf88a80161be9cf3281fb Clean
smss.exb 858e3da84c5389952e1ad3701e410f61 Clean
wininit.exb e83650f70459a027aa596e1a73c961a1 Clean
svchost.exb b7c999040d80e5bf87886d70d992c51e Clean
MpCmdRun.exe d1dc475dc8a08618a40809f5f2cbc5e4 Clean
smss.exb 793c887d404f3ee2f9b490c21c38dd80 Clean
wininit.exb 9ef51c8ad595c5e2a123c06ad39fccd7 Clean
csrss.exb 72565e7a0145e0657e586f6cf7696dc7 Clean

Certificate review summary

Use the file hashes to verify this signature

ThreatInfo groups the signed files above so you can compare exact hashes and detection labels. A signature name alone is not enough to decide whether a file is safe.

Recommended checks

  • Open any matching file report and compare the MD5 hash.
  • Confirm the file path and download source before trusting the binary.
  • Run a GridinSoft scan if the signed file appears unexpectedly.