home

cshelper64.exe

CSHelper Application

ArtistScope Pty Ltd

It runs as a separate (within the context of its own process) windows Service named “CopySafe Helper Service”.
Publisher:
ArtistScope Pty Ltd  (signed and verified)

Product:
CSHelper Application

Description:
ArtistScope Helper Service

Version:
4, 6, 0, 6

MD5:
853c8137c418517ce7b70cfd3e8a1e11

SHA-1:
bbea6c4f0103cf2ee987475943985bea124e7c0d

SHA-256:
b8223e4e139a704d8e5a23d5a6b572b6813da7382a8a0e65c82fad3c9173092b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 11:34:28 AM UTC  (today)

File size:
468.5 KB (479,736 bytes)

Product version:
4, 6, 0, 6

Copyright:
Copyright © 1998-2011 ArtistScope. All rights reserved

Original file name:
CSHelper.exe

File type:
Executable application (Win64 EXE)

Language:
English (Australia)

Common path:
C:\Program Files\common files\artistscope\cshelper64.exe

Digital Signature
Signed by:
ArtistScope Pty Ltd

Authority:
GlobalSign nv-sa

Valid from:
7/8/2010 8:17:38 AM

Valid to:
7/9/2011 8:17:34 AM

Subject:
CN=ArtistScope Pty Ltd, O=ArtistScope Pty Ltd, L=Bongaree, S=QLD, C=AU

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
01000000000129B2D91B79

File PE Metadata
Compilation timestamp:
1/13/2011 10:17:41 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:XvFV29THXeXcuwpq9jW7mZO21IYUsVtG0JsMb5nKVpcYSLVqZNongTsIl0:XP29a70C4mPmYdNKYLVqZuw+

Entry address:
0x12730

Entry point:
48, 83, EC, 28, E8, E7, 5E, 00, 00, 48, 83, C4, 28, E9, 0E, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 40, 53, 48, 83, EC, 20, 48, 83, F9, E0, 48, 8B, D9, 0F, 87, 9B, 00, 00, 00, 48, 89, 74, 24, 30, 48, 85, C9, BE, 01, 00, 00, 00, 48, 0F, 45, F1, 48, 89, 7C, 24, 38, 66, 66, 90, 66, 66, 66, 90, 48, 8B, 0D, C1, 26, 06, 00, 48, 85, C9, 75, 20, E8, 5F, 50, 00, 00, B9, 1E, 00, 00, 00, E8, 15, 4E, 00, 00, B9, FF, 00, 00, 00, E8, 9B, 21, 00, 00, 48, 8B, 0D, 9C, 26, 06, 00, 4C, 8B, C6, 33...
 
[+]

Entropy:
5.7511

Code size:
321 KB (328,704 bytes)

Service
Display name:
CopySafe Helper Service

Service name:
CSHelper

Type:
Win32OwnProcess


Scan cshelper64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.