AxInstUI.exe
ActiveX Installer Service file version info
Program on Windows 8 known copies with hashes
Is it the real AxInstUI.exe?
C:\Windows\system32\8 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\AxInstUI.exe · signed by Microsoft Windows
78151f1971e2203ee18f799ff56164de09ec55c97a53453039f49c3139b4485810.0.19041.388 (WinBuild.160101.0800) · C:\Windows\system32\AxInstUI.exe · signed by Microsoft Windows
23692fe79cb8e509356399155f22016e067c68b79c94cf149b4b3aadc793446910.0.19041.388 (WinBuild.160101.0800) · C:\Windows\system32\AxInstUI.exe · signed by Microsoft Windows
3fa0691cbdc871981560b8dce54491682cd7b574c5416defc889d90830fe63f810.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\AxInstUI.exe · signed by Microsoft Windows
72fd43a0e871b319f6298cd92b5e55a8852c17fc55e802ce75abb6fb44315e2d10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\AxInstUI.exe · signed by Microsoft Windows
765ceb7aa2650ad4a8788b1fc11746f784274081972428ccde39db4cf4e924aa10.0.17763.1339 (WinBuild.160101.0800) · C:\Windows\system32\AxInstUI.exe · signed by Microsoft Windows
fdd4bc2d78d4567b9309b637f6126a898f97e1b80a4dd9035e671683b6bbee3e10.0.17763.1 (WinBuild.160101.0800) · C:\windows\system32\AxInstUI.exe · signed by Microsoft Windows
d4e66ed99de8b27c7ec96e66ed10086811b0f75ee0d308a5ac7e1e08c5bd078810.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\AxInstUI.exe · signed by Microsoft Windows
4974a7203decd230b06935a9f76da8cbbe4291f398e6256201f7ee6dbd2fa68bFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.