Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	2.43%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.66%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.22%
6.2.9200.16384 (win8_rtm.120725-1247)	2.65%
6.2.9200.16384 (win8_rtm.120725-1247)	0.88%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.22%
6.2.8102.0 (winmain_win8m3.110823-1455)	0.44%
6.1.7601.22149 (win7sp1_ldr.121031-1536)	0.22%
6.1.7600.16385 (win7_rtm.090713-1255)	22.35%
6.1.7600.16385 (win7_rtm.090713-1255)	17.92%
6.1.7600.16385 (win7_rtm.090713-1255)	43.58%
6.1.7600.16385 (win7_rtm.090713-1255)	4.42%
6.1.7600.16385 (win7_rtm.090713-1255)	0.22%
6.1.7600.16385 (win7_rtm.090713-1255)	0.22%
6.1.7600.16385 (win7_rtm.090713-1255)	0.22%
6.0.6000.16386 (vista_rtm.061101-2205)	0.44%
6.0.6000.16386 (vista_rtm.061101-2205)	2.43%
6.0.6000.16386 (vista_rtm.061101-2205)	0.44%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegQueryInfoKeyW, RegEnumValueW, RegDeleteValueW, RegOpenCurrentUser, RegisterServiceCtrlHandlerExW, SetServiceStatus, UnregisterTraceGuids, RegisterTraceGuidsW, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, RegQueryValueExW, IsValidSid, EqualSid, DuplicateTokenEx, ImpersonateLoggedOnUser, RevertToSelf, EventUnregister, EventWrite, EventEnabled, EventRegister, LookupAccountNameW, LookupAccountSidW, ConvertStringSidToSidW, GetLengthSid, CopySid, RegCloseKey, RegSetValueExW, RegCreateKeyExW, RegDeleteKeyW, RegOpenKeyExW, TraceMessage, ConvertSidToStringSidW, OpenProcessToken, OpenThreadToken, SetThreadToken, GetTokenInformation, FreeSid, CheckTokenMembership, AllocateAndInitializeSid, RegNotifyChangeKeyValue

api-ms-win-core-datetime-l1-1-0.dll

GetDateFormatW, GetTimeFormatW

api-ms-win-core-datetime-l1-1-1.dll

GetDateFormatW, GetTimeFormatW

api-ms-win-core-debug-l1-1-0.dll

DebugBreak, OutputDebugStringW

api-ms-win-core-debug-l1-1-1.dll

OutputDebugStringW, DebugBreak

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError, SetLastError, UnhandledExceptionFilter, SetUnhandledExceptionFilter

api-ms-win-core-errorhandling-l1-1-1.dll

SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetLastError, SetLastError

api-ms-win-core-file-l1-1-0.dll

FileTimeToLocalFileTime, FileTimeToSystemTime, CreateDirectoryW, GetFileAttributesW, GetDiskFreeSpaceExW, CompareFileTime, FindNextFileW, FindFirstFileW, FindClose

api-ms-win-core-file-l1-1-1.dll

GetFileAttributesW, CreateDirectoryW, FileTimeToLocalFileTime, FileTimeToSystemTime, GetDiskFreeSpaceExW, FindNextFileW, FindClose, FindFirstFileW, CompareFileTime

api-ms-win-core-file-l1-2-0.dll

FindNextFileW, FindFirstFileW, GetFileAttributesW, CreateDirectoryW, FileTimeToLocalFileTime, CompareFileTime, GetDiskFreeSpaceExW, FindClose

api-ms-win-core-file-l1-2-1.dll

CreateDirectoryW, FileTimeToLocalFileTime, CompareFileTime, GetDiskFreeSpaceExW, FindFirstFileW, GetFileAttributesW, FindNextFileW, FindClose

api-ms-win-core-handle-l1-1-0.dll

CloseHandle

api-ms-win-core-interlocked-l1-1-0.dll

InterlockedExchange, InterlockedCompareExchange64, InterlockedDecrement, InterlockedIncrement, InterlockedCompareExchange

api-ms-win-core-interlocked-l1-2-0.dll

InterlockedCompareExchange64, InterlockedDecrement, InterlockedCompareExchange, InterlockedExchange, InterlockedIncrement

api-ms-win-core-libraryloader-l1-1-0.dll

LoadStringW, FreeLibrary, LockResource, LoadResource, SizeofResource, DisableThreadLibraryCalls, FreeLibraryAndExitThread, GetProcAddress, LoadLibraryExA

api-ms-win-core-libraryloader-l1-1-1.dll

LoadResource, DisableThreadLibraryCalls, SizeofResource, FreeLibrary, FreeLibraryAndExitThread, LockResource, LoadStringW

api-ms-win-core-localregistry-l1-1-0.dll

RegOpenCurrentUser, RegOpenKeyExW, RegDeleteKeyExW, RegCreateKeyExW, RegSetValueExW, RegCloseKey, RegDeleteValueW, RegEnumValueW, RegNotifyChangeKeyValue, RegQueryInfoKeyW, RegQueryValueExW

api-ms-win-core-misc-l1-1-0.dll

LocalFree, Sleep, lstrcmpiW, lstrlenW

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcessId, GetCurrentThreadId, CreateThread, GetThreadPriority, GetCurrentProcess, TerminateProcess, GetCurrentThread, SetThreadToken, OpenThreadToken, OpenProcessToken, SetThreadPriority

api-ms-win-core-processthreads-l1-1-1.dll

GetCurrentProcessId, TerminateProcess, GetCurrentThreadId, CreateThread, GetThreadPriority, GetCurrentThread, SetThreadPriority, GetCurrentProcess, OpenThreadToken, OpenProcessToken, SetThreadToken

api-ms-win-core-processthreads-l1-1-2.dll

GetCurrentProcessId, TerminateProcess, GetCurrentThreadId, CreateThread, GetThreadPriority, GetCurrentThread, SetThreadPriority, GetCurrentProcess

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter

api-ms-win-core-registry-l1-1-0.dll

RegEnumValueW, RegQueryInfoKeyW, RegNotifyChangeKeyValue, RegQueryValueExW, RegCloseKey, RegSetValueExW, RegOpenCurrentUser, RegEnumKeyExW, RegDeleteValueW, RegCreateKeyExW, RegOpenKeyExW, RegDeleteKeyExW

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar

api-ms-win-core-synch-l1-1-0.dll

CancelWaitableTimer, WaitForMultipleObjectsEx, ReleaseSemaphore, SetWaitableTimer, SetEvent, WaitForSingleObject, InitializeCriticalSectionAndSpinCount, CreateEventW, DeleteCriticalSection, EnterCriticalSection, InitializeCriticalSection, ResetEvent, LeaveCriticalSection

api-ms-win-core-synch-l1-1-1.dll

SetEvent, ResetEvent, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, Sleep, WaitForSingleObject, SetWaitableTimer, WaitForMultipleObjectsEx, CancelWaitableTimer, InitializeCriticalSection, CreateEventW, LeaveCriticalSection, EnterCriticalSection, ReleaseSemaphore

api-ms-win-core-synch-l1-2-0.dll

EnterCriticalSection, LeaveCriticalSection, CreateEventW, SetEvent, ResetEvent, DeleteCriticalSection, Sleep, InitializeCriticalSection, ReleaseMutex, CreateMutexW, ReleaseSemaphore, CancelWaitableTimer, WaitForMultipleObjectsEx, SetWaitableTimer, WaitForSingleObject, InitializeCriticalSectionAndSpinCount

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime, GetSystemTime, SystemTimeToFileTime, GetTickCount

api-ms-win-core-sysinfo-l1-1-1.dll

GetSystemTimeAsFileTime, GetTickCount, GetSystemTime, SystemTimeToFileTime, GetTickCount64

api-ms-win-core-sysinfo-l1-2-0.dll

GetTickCount64, GetTickCount, GetSystemTime, GetSystemTimeAsFileTime

api-ms-win-core-sysinfo-l1-2-1.dll

GetTickCount64, GetTickCount, GetSystemTime, GetSystemTimeAsFileTime

api-ms-win-core-threadpool-l1-1-0.dll

CloseThreadpoolCleanupGroupMembers, CloseThreadpoolCleanupGroup, CreateThreadpoolWait, CreateThreadpoolCleanupGroup, CreateThreadpool, SetThreadpoolThreadMaximum, SetThreadpoolWait, CloseThreadpool, WaitForThreadpoolWaitCallbacks, CloseThreadpoolWait

api-ms-win-core-threadpool-l1-1-1.dll

CloseThreadpoolCleanupGroup, QueueUserWorkItem, CloseThreadpoolWait, CloseThreadpoolCleanupGroupMembers, CreateThreadpoolCleanupGroup, CreateThreadpoolWait, SetThreadpoolThreadMaximum, CreateThreadpool, CloseThreadpool, WaitForThreadpoolWaitCallbacks, SetThreadpoolWait

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolWait, CreateThreadpoolWait, SetThreadpoolWait, WaitForThreadpoolWaitCallbacks, CloseThreadpool, CreateThreadpool, SetThreadpoolThreadMaximum, CloseThreadpoolCleanupGroup, CreateThreadpoolCleanupGroup, CloseThreadpoolCleanupGroupMembers

api-ms-win-obsolete-kernelbase-l1-1-0.dll

LocalFree, lstrcmpiW, lstrlenW

api-ms-win-security-base-l1-1-0.dll

ImpersonateLoggedOnUser, IsValidSid, EqualSid, DuplicateTokenEx, RevertToSelf, GetLengthSid, CopySid, AllocateAndInitializeSid, CheckTokenMembership, FreeSid, GetTokenInformation

api-ms-win-security-base-l1-2-0.dll

RevertToSelf, DuplicateTokenEx, EqualSid, IsValidSid, ImpersonateLoggedOnUser

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW, SetServiceStatus

api-ms-win-service-core-l1-1-1.dll

SetServiceStatus, RegisterServiceCtrlHandlerExW

api-ms-win-service-management-l1-1-0.dll

OpenServiceW, CloseServiceHandle, OpenSCManagerW

api-ms-win-service-management-l2-1-0.dll

ChangeServiceConfigW

kernel32.dll

CreateIoCompletionPort, GetQueuedCompletionStatus, VirtualAlloc, VirtualFree, TlsFree, TlsSetValue, TlsGetValue, TlsAlloc, SystemTimeToTzSpecificLocalTime, ReplaceFileW, InterlockedExchangeAdd, QueryPerformanceFrequency, GetFileSizeEx, TrySubmitThreadpoolCallback, CallbackMayRunLong, LocalAlloc, ExpandEnvironmentStringsW, GetDriveTypeW, DuplicateHandle, DelayLoadFailureHook, FormatMessageW, ReleaseMutex, CreateSemaphoreW, CreateWaitableTimerW, WaitForMultipleObjects, LoadLibraryW, FindResourceW, CreateMutexW, HeapAlloc, HeapFree, HeapReAlloc, CompareStringW, QueueUserWorkItem, GetProcessHeap, LocalFree, MultiByteToWideChar, CreateDirectoryW, GetFileAttributesW, GetTimeFormatW, GetDateFormatW, FileTimeToSystemTime, Sleep, FreeLibrary, LockResource, LoadResource, SizeofResource, FileTimeToLocalFileTime, GetTickCount, DebugBreak, OutputDebugStringW, WaitForSingleObject, GetSystemTime, GetCurrentThreadId, lstrcmpiW, SystemTimeToFileTime, CompareFileTime, InitializeCriticalSectionAndSpinCount, InterlockedCompareExchange64, DisableThreadLibraryCalls, CloseThreadpoolWait, WaitForThreadpoolWaitCallbacks, SetThreadpoolWait, CloseThreadpool, SetWaitableTimer, CancelWaitableTimer, SetThreadpoolThreadMaximum, CreateThreadpool, CreateThreadpoolWait, WaitForMultipleObjectsEx, GetDiskFreeSpaceExW, SetLastError, ReleaseSemaphore, FreeLibraryAndExitThread, CloseThreadpoolCleanupGroupMembers, CloseThreadpoolCleanupGroup, CreateThreadpoolCleanupGroup, InterlockedExchange, InterlockedCompareExchange, QueryPerformanceCounter, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, CreateThread, ResetEvent, SetEvent, CreateEventW, lstrlenW, DeleteCriticalSection, GetSystemTimeAsFileTime, InterlockedDecrement, InterlockedIncrement, EnterCriticalSection, CloseHandle, LeaveCriticalSection, GetThreadPriority, GetCurrentThread, SetThreadPriority, GetLastError, GetCurrentProcessId, InitializeCriticalSection, ResolveDelayLoadedAPI, LoadLibraryExW, GetProcAddress

mpr.dll

WNetGetConnectionW, WNetEnumResourceW, WNetCloseEnum, WNetOpenEnumW

msvcrt.dll

DllMain

ntdll.dll

EtwTraceMessage, NtClose, RtlNtStatusToDosErrorNoTeb, NtQueryInformationToken, RtlInitializeResource, RtlDeleteResource, RtlAcquireResourceShared, RtlAcquireResourceExclusive, RtlReleaseResource, EtwEventUnregister, RtlAppendUnicodeStringToString, RtlPrefixUnicodeString, NtCreateFile, NtQueryInformationFile, NtWaitForSingleObject, NtCreateEvent, RtlLengthSid, NtQueryDirectoryFile, RtlGetLastNtStatus, RtlDuplicateUnicodeString, RtlValidSid, NtSetInformationFile, NtWriteFile, NtDeviceIoControlFile, RtlFreeHeap, RtlDosPathNameToNtPathName_U, RtlCompareUnicodeString, NtQueryVolumeInformationFile, RtlEqualUnicodeString, RtlNtStatusToDosError, RtlInitUnicodeString, NtFsControlFile, DbgPrint, EtwGetTraceEnableFlags, EtwGetTraceEnableLevel, EtwGetTraceLoggerHandle, EtwRegisterTraceGuidsW, EtwUnregisterTraceGuids, RtlFreeUnicodeString, RtlGetLengthWithoutLastFullDosOrNtPathElement, RtlpEnsureBufferSize, RtlAppendPathElement, RtlpApplyLengthFunction, RtlGetLengthWithoutTrailingPathSeperators, RtlAssert, EtwEventRegister, EtwEventEnabled, EtwEventWrite, NtReadFile, RtlUnsubscribeWnfNotificationWaitForCompletion, RtlSubscribeWnfStateChangeNotification, RtlQueryWnfStateData, WinSqmSetDWORD

ole32.dll

CoQueryProxyBlanket, CoGetCallContext, CoCopyProxy, CoRevertToSelf, StringFromGUID2, CoCreateGuid, CoTaskMemAlloc, CoCreateInstance, CoTaskMemFree, CoCancelCall, CoUninitialize, CoDisableCallCancellation, CoEnableCallCancellation, CoInitializeEx, CoRevokeClassObject, CoRegisterClassObject, CLSIDFromString, CLSIDFromProgID, CoDisconnectObject, CoSetProxyBlanket

shell32.dll

SHBindToParent, SHGetFolderPathEx

shlwapi.dll

StrRetToStrW, SHCreateStreamOnFileEx

sspicli.dll

LsaCallAuthenticationPackage, LsaDeregisterLogonProcess, LsaLookupAuthenticationPackage, LsaConnectUntrusted, LsaFreeReturnBuffer

user32.dll

PeekMessageW, PostThreadMessageW, DispatchMessageW, TranslateMessage, MsgWaitForMultipleObjectsEx, CharLowerW, CharUpperW, LoadStringW

userenv.dll

EnterCriticalPolicySection, LeaveCriticalPolicySection, RegisterGPNotification, ExpandEnvironmentStringsForUserW, UnregisterGPNotification

wtsapi32.dll

WTSQueryUserToken, WTSEnumerateSessionsW, WTSFreeMemory

Export table

CscServiceMain

CscTestGetInterface

cscsvc.dll

CSC Service DLL by Microsoft

Remove cscsvc.dll

Version:	6.1.7600.16385 (win7_rtm.090713-1255)
MD5:	15f93b37f6801943360d9eb42485d5d3
SHA1:	76b39eaf2df94a1cd2e9b11fd3d4ba39ee8ef1df
SHA256:	dd6838c6496cb15f8bb57a6596f6a64add9c36b09f062295699131232712b558

This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

cscsvc.dll is loaded as dynamic link library that runs in the context of a process. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This version is designed to run on Windows 7.

Details

File name:	cscsvc.dll
Publisher:	Microsoft Corporation
Product name:	CSC Service DLL
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\cscsvc.dll
Original name:	cscsvc.dll.mui
File version:	6.1.7600.16385 (win7_rtm.090713-1255)
Product version:	6.1.7600.16385
Size:	533.5 KB (546,304 bytes)
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Behaviors

Hosted services

Runs as a shared service under the Windows svcHost

Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'
Shared name is 'CscService'

Distribution by Windows OS

OS version	distribution
Windows 7 Ultimate	58.50%
Windows 7 Professional	21.00%
Windows 8.1 Pro	5.00%
Windows 8 Pro	4.00%
Windows 8 Pro with Media Center	2.00%
Windows Seven Black Edition	1.50%
Windows 8.1 Pro Preview	1.50%
Windows Vista Ultimate	1.50%
Windows Developer Preview	1.00%
Windows 7 Enterprise	1.00%
Windows Vista Business	1.00%
Windows 8.1 Pro with Media Center	0.50%
Windows Se7en Titan	0.50%
Windows 8.1 Pro Preview with Media Center	0.50%
Windows 7 Ultimate N	0.50%

Distribution by country

United States installs about 24.00% of CSC Service DLL.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	23.72%
Acer	17.00%
ASUS	15.81%
Hewlett-Packard	15.02%
Lenovo	9.49%
Intel	4.74%
GIGABYTE	3.56%
Samsung	2.37%
Sony	2.37%
Toshiba	1.58%
NEC	0.79%
Alienware	0.79%
Compaq	0.79%
American Megatrends	0.79%
MSI	0.79%
Sahara	0.40%

Remove Adware and Spyware Programs, FREE Download!