deploymentcsphelper.exe

File Path: C:\Windows\system32\deploymentcsphelper.exe

Hashes

Type	Hash
MD5	`B924F1A7DE5ED8331B3375A778B3FE38`
SHA1	`E62CE42735C05D2BB792AF2648DAEFC04DEA144C`
SHA256	`90E6DBDB4EB72ED9BCB4DCDC53F9A3CE3108297F84CE346B9AF04790A641CCCE`
SHA384	`59AC0C7A4F32AE5C1EE16B6DE21A8043D397486CC0DFD341692563436DD440BEC4033308EECFCF869E846BCB05C22F6E`
SHA512	`0002AC854E72866F10B4779C3F12CCA97554654463341E05632198C31F98833E176D12D11E665AC2684E32BAEC8B08EAD04FD05345D60D73839BDAF0ED311810`
SSDEEP	`768:P3a3ZvbIV9503ncUOf6VxDpl038yk5Akzaqd:P3aJDIL5GcUTt+omUH`
IMP	`677AB69463CC55E2E7CFC2A39BB04B46`
PESHA1	`88FB94B3E4FCF3E828DC682F884016458A3271A8`
PE256	`81BC5B4D0F6CECDF15D2C8FAD23714A1E35063B8E6F9214EA98FA1BD75D9D5AA`

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\combase.dll
C:\Windows\system32\deploymentcsphelper.exe
C:\Windows\system32\DismApi.DLL
C:\Windows\System32\GDI32.dll
C:\Windows\System32\gdi32full.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\OLEAUT32.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\SHELL32.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\System32\USER32.dll
C:\Windows\system32\WDSCORE.dll
C:\Windows\System32\win32u.dll

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename:
Product Name:
Company Name:
File Version:
Product Version:
Language:
Legal Copyright:
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/75
VirusTotal Link: https://www.virustotal.com/gui/file/90e6dbdb4eb72ed9bcb4dcdc53f9a3ce3108297f84ce346b9af04790a641ccce/detection

MIT License. Copyright (c) 2020-2021 Strontic.