LicensingUI.exe
Licensing UI file version info
Program on Windows 7 known copies with hashes
Is it the real LicensingUI.exe?
C:\Windows\system32\7 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\LicensingUI.exe · signed by Microsoft Windows
0ac952f86c1483b33f94ad1d4fc1fb0cc23e1fe3e36869a7c3bffbc924c4b6e310.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\LicensingUI.exe · signed by Microsoft Windows
0e9eb89aa0df9bb84a8f11b0bb3e9d89905355de34c91508968b4cb78bc3f6c510.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\LicensingUI.exe · signed by Microsoft Windows
bcb44bd5f1738fd10a2150eb59aa4c70dd3dac09085427b1b9ca427b45f2668510.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\LicensingUI.exe · signed by Microsoft Windows
3c0d225cf94b88edc3135219be895c0046dfee1839a85ae3052a6f0a9b72b4b610.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\LicensingUI.exe · signed by Microsoft Windows
5106206f1502ed82eec42f2a592d3c9deef70ed54b2967bc0ea8ff4d9ba1bd2810.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\LicensingUI.exe · signed by Microsoft Windows
7a4e307a372d56387ac61870e770eb0097a12c26fe2c470d14d41ee76e3c07796.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\LicensingUI.exe · signed by Microsoft Windows
cd0a1121e8a7b96dfd341fbd1f53016cd1c185ef868cd7250326047b7cb48a0dFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.