RtCamU64.exe
RtCamU file version info
Program on Windows 1 known copy with hashes
Is it the real RtCamU64.exe?
Original name
RtCamU.exe in the file’s header: a renamed copy still carries itInstalled in
C:\WINDOWS\system32\DriverStore\FileRepository\rtsuvc.inf_amd64_a028e52e0363c18f\Signed byMicrosoft Windows Hardware Compatibility Publisher
ProductRtCamU, Realtek Semiconductor Corp.
DescriptionRtCamU
1 known copy
1.11.0.0 · C:\WINDOWS\system32\DriverStore\FileRepository\rtsuvc.inf_amd64_a028e52e0363c18f\RtCamU64.exe · signed by Microsoft Windows Hardware Compatibility Publisher
247e18e7b42ea59163ac0f9002277723da2cf55c4ecb12bc7d8bbe6a948f1260From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.