FsIso.exe

  • File Path: C:\Windows\system32\FsIso.exe
  • Description: Secure Frame Server Helper

Hashes

Type Hash
MD5 F15BC7477EFFEEEE577553A3D19FC7E7
SHA1 EDB538FC0F7EBC64CE11477EC5519D0DD921307C
SHA256 A5244DF09BD9037D7B8A144BF3E3BE43E9E41DBFE50E11014A211A8A0E3165EA
SHA384 87F9A6013CDCAEB20C2DEBD82D9A8C11E34330327F08914842B1105449007D912485965CD7E35BDF759B3DE2B9798BB2
SHA512 4FB96CA998FF09BD23B2EA74AD95976C5086B1CFA59937902D84FA8DD10643EE0D6B2C385A3BC3BEDE1ED051DA7B73EF5F9D7D510B4DAAF13984362F805D352C
SSDEEP 1536:mOpprVd4sYWZau3+p9kxXqZzNiLyC0gsLo3u9DBLxTOXxDPGo:mOjAHWZau3ckxa9Mh0gsEe9DnUl/
IMP 54FDA49E38FC53ED5FD39A6AE34568E0
PESHA1 CD5DAC4A6F036CF529C1678C89F7EE67BC12F537
PE256 6988D685E893412E13B26D410C97ABEEB47C57E37083CF2A50AE44B0621C1ED8

Runtime Data

Open Handles:

Path Type
(RW-) C:\Users\user File
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section

Loaded Modules:

Path
C:\Windows\system32\FsIso.exe
C:\Windows\system32\iumbase.DLL
C:\Windows\system32\IumSdk.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: FsIso.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1266 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1266
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/a5244df09bd9037d7b8a144bf3e3be43e9e41dbfe50e11014a211a8a0e3165ea/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\FsIso.exe 91
C:\Windows\system32\FsIso.exe 63

MIT License. Copyright (c) 2020-2021 Strontic.