home

cshelper64.exe

CSHelper Application

ArtistScope Pty Ltd

It runs as a separate (within the context of its own process) windows Service named “CopySafe Helper Service”.
Publisher:
ArtistScope Pty Ltd  (signed and verified)

Product:
CSHelper Application

Description:
ArtistScope Helper Service

Version:
4, 6, 0, 4

MD5:
e790c26e76cdc4a369afb448766c8754

SHA-1:
27053d3177f8a057ddc1c9dbb0f5a3e33aaf99ee

SHA-256:
1ea6baf8a599dc7a3df4fc7d3ace6ff094ab89801a75a2add6ff50053ffe7258

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 2:21:13 PM UTC  (today)

File size:
353.2 KB (361,680 bytes)

Product version:
4, 6, 0, 4

Copyright:
Copyright © 1998-2010 ArtistScope. All rights reserved

Original file name:
CSHelper.exe

File type:
Executable application (Win64 EXE)

Language:
English (Australia)

Common path:
C:\Program Files\common files\artistscope\cshelper64.exe

Digital Signature
Signed by:
ArtistScope Pty Ltd

Authority:
GlobalSign nv-sa

Valid from:
7/8/2010 6:17:38 PM

Valid to:
7/9/2011 6:17:34 PM

Subject:
CN=ArtistScope Pty Ltd, O=ArtistScope Pty Ltd, L=Bongaree, S=QLD, C=AU

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
01000000000129B2D91B79

File PE Metadata
Compilation timestamp:
9/30/2010 3:30:14 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:zsK7R+smSG8c3egHzod+pnBlBftYY840NoRLiIh:zh+GkNtZfOhuT

Entry address:
0x21DC0

Entry point:
48, 83, EC, 28, E8, F7, 5C, 00, 00, 48, 83, C4, 28, E9, 0E, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 6C, 24, 18, 48, 89, 74, 24, 20, 48, 89, 54, 24, 10, 57, 41, 54, 41, 55, 41, 56, 41, 57, 48, 83, EC, 40, 4D, 8B, 71, 08, 49, 8B, 29, 4D, 8B, 69, 38, 49, 2B, EE, 33, FF, F6, 41, 04, 66, 4D, 8B, F9, 48, 8B, F2, 4C, 8B, E1, 0F, 85, E6, 00, 00, 00, 48, 89, 4C, 24, 30, 4C, 89, 44, 24, 38, 41, 39, 7D, 00, 0F, 86, 3B, 01, 00, 00, 49, 8D, 5D, 0C, 66, 66, 66, 90...
 
[+]

Entropy:
5.6225

Code size:
242 KB (247,808 bytes)

Service
Display name:
CopySafe Helper Service

Service name:
CSHelper

Type:
Win32OwnProcess


Scan cshelper64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.