coredpussvr.exe
by Various
Endpoint Management
Summary
Core DPUS Server - core data processing utility server for management platforms.
coredpussvr.exe is the 643rd most commonly executed Windows program in EchoTrail's dataset, observed 6,641 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by svchost.exe.
643rd
most commonly executed Windows program
6,641
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\System32100%
Top Hashes (SHA256)
- 1536d79580e8c83e32373250489d7e98ad2342c674d269d11e0638c153d66fe676.65%
- 8660ab3aeef738423b0a5566d40fa095a4eb50c193d57a36119ae3fd6d99ac7a18.87%
- b4474985c59ab279e2dce3874f46cb2490898f841210dd0af521be446bc6f8464.44%
- 7312ba6354a16f1547e5e56fd2880e21d6612d61a901ec1e5febf8004aac083e0.05%
Process Ancestry
Top Grandparents
- services.exe100%
Top Parents
- svchost.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about coredpussvr.exe
Rocky answers questions about coredpussvr.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.