CmdID

CmdID / Files

IntelCpHeciSvc.exe

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real IntelCpHeciSvc.exe?

file version info and known copies
Installed inC:\WINDOWS\system32\DriverStore\FileRepository\108559.inf_amd64_8327908856b66027\
C:\WINDOWS\system32\DriverStore\FileRepository\igdlh64.inf_amd64_69885addc92dcf91\
Signed byMicrosoft Windows Hardware Compatibility Publisher

2 known copies

Version not recorded · C:\WINDOWS\system32\DriverStore\FileRepository\igdlh64.inf_amd64_69885addc92dcf91\IntelCpHeciSvc.exe · signed by Microsoft Windows Hardware Compatibility Publisher

e77c3ce24da8748f96a0f6f8e410bac484a6393ec969ef30d79e0d71ff36967a

Version not recorded · C:\WINDOWS\system32\DriverStore\FileRepository\108559.inf_amd64_8327908856b66027\IntelCpHeciSvc.exe · signed by Microsoft Windows Hardware Compatibility Publisher

f6ab2e67e3a22b40b9a130d3b94358401dacd3f265416990b72895488e8b743f

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.