LockScreenContentServer.exe

  • File Path: C:\WINDOWS\system32\LockScreenContentServer.exe
  • Description: LockScreenContent Server

Hashes

Type Hash
MD5 4DB3B8A18C1051F716E3FBFF1EBEC913
SHA1 20C458F132EC1FA266BA3B80420EDAB36E404C73
SHA256 B9ADDEE6D316C5B0C7B94CDC5A2F84D5DA77DF6A23ED6DCE8BB4741A95AF2AC8
SHA384 05E65A1479A55C63FA518AC7D6747654B59815C0184803C72C36E65A4181047F1735DB33AC44A568F983787A7C954F19
SHA512 F28F4DD73E92F94674C0B565C5EABC09BBEA4BCF906C183E59D0EE41F6B03B39F4004B9B29F1AA98ABAC6EF7BE49911AE390A96BFBC62EC561FC85FF1F7BD471
SSDEEP 768:89X4Jn5ameCWzVmAX/7jJVKJFQ2fZ+WxSRxh1PvC5h:U4J/Wh/7dVoq2fZ+WxYxXPvc
IMP E441628266F72396B90DBB4176D0A3BD
PESHA1 D03189FAB98D14D4FD8DD7C120E3D9CAB7DC0DE7
PE256 9DDEF1E38175848996E581C1DB57A5F91C351C6BBAFFBA207714451C847B9947

Runtime Data

Open Handles:

Path Type
(RW-) C:\Windows\System32 File
\BaseNamedObjects__ComCatalogCache__ Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section

Loaded Modules:

Path
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\system32\LockScreenContentServer.exe
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\USER32.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: LockScreenContentServer.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/74
  • VirusTotal Link: https://www.virustotal.com/gui/file/b9addee6d316c5b0c7b94cdc5a2f84d5da77df6a23ed6dce8bb4741a95af2ac8/detection

MIT License. Copyright (c) 2020-2021 Strontic.