LockScreenContentServer.exe
- File Path:
C:\WINDOWS\system32\LockScreenContentServer.exe
- Description: LockScreenContent Server
Hashes
Type |
Hash |
MD5 |
4DB3B8A18C1051F716E3FBFF1EBEC913 |
SHA1 |
20C458F132EC1FA266BA3B80420EDAB36E404C73 |
SHA256 |
B9ADDEE6D316C5B0C7B94CDC5A2F84D5DA77DF6A23ED6DCE8BB4741A95AF2AC8 |
SHA384 |
05E65A1479A55C63FA518AC7D6747654B59815C0184803C72C36E65A4181047F1735DB33AC44A568F983787A7C954F19 |
SHA512 |
F28F4DD73E92F94674C0B565C5EABC09BBEA4BCF906C183E59D0EE41F6B03B39F4004B9B29F1AA98ABAC6EF7BE49911AE390A96BFBC62EC561FC85FF1F7BD471 |
SSDEEP |
768:89X4Jn5ameCWzVmAX/7jJVKJFQ2fZ+WxSRxh1PvC5h:U4J/Wh/7dVoq2fZ+WxYxXPvc |
IMP |
E441628266F72396B90DBB4176D0A3BD |
PESHA1 |
D03189FAB98D14D4FD8DD7C120E3D9CAB7DC0DE7 |
PE256 |
9DDEF1E38175848996E581C1DB57A5F91C351C6BBAFFBA207714451C847B9947 |
Runtime Data
Open Handles:
Path |
Type |
(RW-) C:\Windows\System32 |
File |
\BaseNamedObjects__ComCatalogCache__ |
Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db |
Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db |
Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro |
Section |
\Sessions\2\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 |
Section |
\Sessions\2\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 |
Section |
Loaded Modules:
Path |
C:\WINDOWS\System32\KERNEL32.DLL |
C:\WINDOWS\System32\KERNELBASE.dll |
C:\WINDOWS\system32\LockScreenContentServer.exe |
C:\WINDOWS\SYSTEM32\ntdll.dll |
C:\WINDOWS\System32\USER32.dll |
Signature
- Status: Signature verified.
- Serial:
33000002ED2C45E4C145CF48440000000002ED
- Thumbprint:
312860D2047EB81F8F58C29FF19ECDB4C634CF6A
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: LockScreenContentServer.exe
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.22000.1 (WinBuild.160101.0800)
- Product Version: 10.0.22000.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/74
- VirusTotal Link: https://www.virustotal.com/gui/file/b9addee6d316c5b0c7b94cdc5a2f84d5da77df6a23ed6dce8bb4741a95af2ac8/detection
MIT License. Copyright (c) 2020-2021 Strontic.