igfxCUIService.exe
igfxCUIService Module file version info
Program on Windows 2 known copies with hashes
Is it the real igfxCUIService.exe?
Installed in
C:\WINDOWS\system32\C:\WINDOWS\system32\DriverStore\FileRepository\igdlh64.inf_amd64_69885addc92dcf91\Signed byMicrosoft Windows Hardware Compatibility Publisher
ProductIntel(R) Common User Interface, Intel Corporation
DescriptionigfxCUIService Module
2 known copies
6.15.10.4248 · C:\WINDOWS\system32\igfxCUIService.exe · signed by Microsoft Windows Hardware Compatibility Publisher
354d5b4c9b9a178899528e9b060bde6b217d24421a4372c7ad3c2ba085956d526.15.10.3682 · C:\WINDOWS\system32\DriverStore\FileRepository\igdlh64.inf_amd64_69885addc92dcf91\igfxCUIService.exe · signed by Microsoft Windows Hardware Compatibility Publisher
c19bab0e55dd23f0cc106d73daa1154d359d8033e065832e41b9d710e241fcf0From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.