IntelCpHeciSvc.exe
Program on Windows 2 known copies with hashes
Is it the real IntelCpHeciSvc.exe?
Installed in
C:\WINDOWS\system32\DriverStore\FileRepository\108559.inf_amd64_8327908856b66027\C:\WINDOWS\system32\DriverStore\FileRepository\igdlh64.inf_amd64_69885addc92dcf91\Signed byMicrosoft Windows Hardware Compatibility Publisher
2 known copies
Version not recorded · C:\WINDOWS\system32\DriverStore\FileRepository\igdlh64.inf_amd64_69885addc92dcf91\IntelCpHeciSvc.exe · signed by Microsoft Windows Hardware Compatibility Publisher
e77c3ce24da8748f96a0f6f8e410bac484a6393ec969ef30d79e0d71ff36967aVersion not recorded · C:\WINDOWS\system32\DriverStore\FileRepository\108559.inf_amd64_8327908856b66027\IntelCpHeciSvc.exe · signed by Microsoft Windows Hardware Compatibility Publisher
f6ab2e67e3a22b40b9a130d3b94358401dacd3f265416990b72895488e8b743fFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.