Glossary: Network Attacks, Social Engineering and Indicators

svchost.exe

Also written: svch0st.exe

A real Windows process that runs from C:\Windows\System32. A copy running from a temp folder, or a misspelling like svch0st.exe, is malicious.