• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

File Insight / SkypeHost.exe & Winstore.app.exe

Hi Folks,

I am receiving an unusual (in my mind) report from insight on a file called "SkypeHost.exe".  While it is rated as a trust level good, it has been out for less than a week and is used by less then 5 community members (text report to follow this explanation since pasting a screen shot seems near impossible in this editor).    Now my thinking is if this is a legitimate Skype product, it would be seen by hundreds of thousands of users, but if it is malware, it would not be trusted.  VirusTotal does not have any detections for it (ie, it reports clean there).  Is it possible that this is legit / Microsoft has 'customized' this Skype file with some personal / unique info making it fail to match other installations?

For what it is worth, I am having a similar issue with "winstore.app.exe", which only appears to kick off when I (legitimately) launch the Windows store application.

Both files pass the Norton signature scan with flying colours.

Any thoughts?

Thank you!

Filename: SkypeHost.exe

Full Path: C:\Program Files\WindowsApps\microsoft.skypeapp_11.9.251.0_x64__kzf8qxf38zg5c\SkypeHost.exe

____________________________

____________________________

Developers 

Not Available

Version 

11.9.251.0

Identified 

11/6/2016 at 9:45:43 AM

Last Used 

11/6/2016 at 11:09:33 AM

Startup Item 

Yes

____________________________

Very Few Users

Fewer than 5 users in the Norton Community have used this file.

Very New

This file was released less than 1 week  ago.

Good

Norton has given this file a favorable rating.

____________________________

Source File:

skypehost.exe

File Thumbprint - SHA:

3f66406ace259e2ead6fa1463b5d272b0d8c6c41cb94a6129dcb527b7081ebc6

File Thumbprint - MD5:

333ff5a1258010d9e3fd9b37dc578640

**************************

Filename: winstore.app.exe
Full Path: C:\Program Files\WindowsApps\Microsoft.WindowsStore_11610.1001.10.0_x64__8wekyb3d8bbwe\WinStore.App.exe

____________________________

____________________________


Developers 
Not Available

Version 
11610.1001.10.0

Identified 
11/4/2016 at 12:18:02 AM

Last Used 
11/6/2016 at 11:22:24 AM

Startup Item 
Yes

____________________________

Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week  ago.

Good
Norton has given this file a favorable rating.

____________________________


Source File:
svchost.exe

File Created:
winstore.app.exe

____________________________

Performance

____________________________

Avg. Resource Usage: Low
Avg. CPU Usage: Low
Avg. Memory Usage: Low

____________________________

Performance Alert

Process ID 
14124

CPU 
Normal

Memory 
Normal

Handles Count 
Normal

Disk Read Activity 
Normal

Disk Write Activity 
Normal

____________________________


File Thumbprint - SHA:
59fa1e8d35152632f7683c033f40b78c91ce97e1322e59227591b1ab03a82308
File Thumbprint - MD5:
da8caeda8d6fe7bd5267380f8f3854e1
 

Replies

Kudos0

Re: File Insight / SkypeHost.exe & Winstore.app.exe

How to post an image in the forums.

Copy to Clipboard/paste, also helpful.

https://community.norton.com/en/forums/why-5

Re: Why?
Posted: 26-Sep-2016 | 9:54AMPermalink
"Winstore.mobile.exe" does not contain a valid  digital signature. These alerts will be shown when an application without a valid digital signature is accessing the internet. In order to stop seeing these alerts, you can check "Do not ask me again" checkbox or alternatively Settings->Firewall->Advanced Program Control->Change "Low Risk Applications" setting to "Allow".

are you seeing warning of Corrupt or Invalid signature?

http://www.ghacks.net/2016/02/27/disable-skypehost-exe-windows-skype-on-windows-10/

Kudos0

Re: File Insight / SkypeHost.exe & Winstore.app.exe

Thx for the image tip, not the most convenient process, but seems to work!

The Skypehost process explanation seems to line up with what I am experiencing.  The Winstore app does seem to be a signature issue, although since it is a Microsoft app, I would expect it would be signed.  

My primary concern though, is, at least in my experience, why would both Skypehost and Winstore be reported as "Very Few Users" when I would expect that the Windows Store and Skypehost would have hundreds of thousands of users?  Seems suspicious that either File Insight is not functioning properly, there is something I just do not understand, or, lucky me, I have a unique(ish) Malware occurrence.

Thankyou for the thoughts / response!

Kudos0

Re: File Insight / SkypeHost.exe & Winstore.app.exe

My primary concern though, is, at least in my experience, why would both Skypehost and Winstore be reported as "Very Few Users" when I would expect that the Windows Store and Skypehost would have hundreds of thousands of users?  Seems suspicious that either File Insight is not functioning properly, there is something I just do not understand, or, lucky me, I have a unique(ish) Malware occurrence.

> maybe, recent update.  Reputation rating employs Wisdom of Crowds.
I have items like CCleaner, KeePass and Malwarebytes (mbam.exe) with millions of users listed with Norton Insight as Untrusted. 
I've also wondered whether File Insight is functioning properly. 
Hopefully, File Insight criteria is understood by Norton.   Recently, I refreshed Norton install because I had 250 items listed as Untrusted.  I could have Trust Now.  Then I'd have 250 items in User Trusted.    After refresh install (<100), + one week, 125 items listed as Untrusted items including Malwarebytes (mbam.exe) with Millions of users and Good rating.   Just me.

Kudos0

Re: File Insight / SkypeHost.exe & Winstore.app.exe

CiscoKid:

My primary concern though, is, at least in my experience, why would both Skypehost and Winstore be reported as "Very Few Users" when I would expect that the Windows Store and Skypehost would have hundreds of thousands of users?

I have read that part of the file name is random.  If that is the case, everyone's app will be unique.  That would be my guess.

Kudos0

Re: File Insight / SkypeHost.exe & Winstore.app.exe

Regarding Winstore - this notofication from Norton is only for old Windows Store version. I just had the same every time after my Store updates. You can check your rules for apps in Firewall and delete a rule for old Store, just leave one rule for a latest version. I don't know why it happens, or Wndows keeps this old versions in PC, or Norton didn't remove rule, after Store update...
Kudos0

Re: File Insight / SkypeHost.exe & Winstore.app.exe

Hello

That version of Skype is a Preview of Skype that comes with Windows 10. It is possible that there are a lot of windows 10 customers that use the full version of Skype. The Preview version I think came out with the Anniversary Update according to my son.

Thanks.

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NSBU 22.17.0.183 Core Firmware 282 I E 11 Chrome latest version.

This thread is closed from further comment. Please visit the forum to start a new thread.