CPrepSrv.exe
- File Path:
C:\Windows\system32\CPrepSrv.exe - Description: Cluster Server Side Agent
Hashes
| Type | Hash |
|---|---|
| MD5 | C45072B6C75DFFE2346E35BEE9F1B5AD |
| SHA1 | 51E45CA4397AE87E4C09DA23BCE78140F46FB680 |
| SHA256 | E23C6019C1F67EEA8964F725831A49B7968F11B2E925C62459A64A0A5B4574BD |
| SHA384 | 579635A9A9A9318A4F5279488AC42175C4E5633DBFB5AAFC4CDC1BF6B615BB6ED35944D66A00C11816EDD7056B2E171B |
| SHA512 | 401F869056C786F355868F27858BAFC20D07037518779DDDDB5F954F83C6E973043B0EAACCB20F135CD21E906FDEABF011D25A83E642EF034A2B71F2F664F383 |
| SSDEEP | 12288:/QhNlG7kMgnCDgIQB4XICu4sitekTcdpPce9hFouimU9:MlOyCUIQuBu3c6p3hFAmU9 |
Runtime Data
Loaded Modules:
| Path |
|---|
| C:\Windows\System32\advapi32.dll |
| C:\Windows\System32\bcrypt.dll |
| C:\Windows\System32\bcryptPrimitives.dll |
| C:\Windows\System32\cfgmgr32.dll |
| C:\Windows\system32\CLUSAPI.dll |
| C:\Windows\System32\combase.dll |
| C:\Windows\system32\CPrepSrv.exe |
| C:\Windows\System32\CRYPT32.dll |
| C:\Windows\System32\CRYPTSP.dll |
| C:\Windows\system32\DEVOBJ.dll |
| C:\Windows\system32\HEALTHAPI.dll |
| C:\Windows\system32\IPHLPAPI.DLL |
| C:\Windows\System32\KERNEL32.DLL |
| C:\Windows\System32\KERNELBASE.dll |
| C:\Windows\System32\MSASN1.dll |
| C:\Windows\System32\msvcp_win.dll |
| C:\Windows\System32\msvcrt.dll |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\OLEAUT32.dll |
| C:\Windows\system32\RESUTILS.dll |
| C:\Windows\System32\RPCRT4.dll |
| C:\Windows\system32\samcli.dll |
| C:\Windows\System32\sechost.dll |
| C:\Windows\system32\srvcli.dll |
| C:\Windows\system32\SspiCli.dll |
| C:\Windows\System32\ucrtbase.dll |
| C:\Windows\system32\wevtapi.dll |
| C:\Windows\system32\WINNSI.DLL |
| C:\Windows\system32\WMICLNT.dll |
| C:\Windows\System32\WS2_32.dll |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266 - Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840 - Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: CPrepSrv.exe.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0 (WinBuild.160101.0800)
- Product Version: 10.0.17763.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
MIT License. Copyright (c) 2020-2021 Strontic.