SpatialAudioLicenseSrv.exe
Spatial License AppService Broker file version info
Program on Windows 20 known copies with hashes
Is it the real SpatialAudioLicenseSrv.exe?
SpatialLicenseSrv.exe in the file’s header: a renamed copy still carries itC:\Windows\system32\C:\Windows\SysWOW64\20 known copies
10.0.22000.282 (WinBuild.160101.0800) · C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
1b76d92d7535e30d2e01afcb329864f9355aa9fe4aac5b6344639845ff2217c110.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
3733cb898187ebf101d88ee1d0ab3fd0a0aedf68f1e343e7d4b1c0202aed213a10.0.19041.662 (WinBuild.160101.0800) · C:\Windows\system32\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
1a82cb48027a92e0463ccfd7a47ab01ceac5338a13c1cc74fa6ca718ee42c3f810.0.19041.662 (WinBuild.160101.0800) · C:\Windows\SysWOW64\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
61d656f74db78e231cf43671f4bba789bfa1128fe267cdfd540e147065e58e7910.0.19041.546 (WinBuild.160101.0800) · C:\Windows\SysWOW64\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
386f0d88a343a404458b060114da84b314f1bcc01547f12baa1f90a6b7deb0da10.0.19041.546 (WinBuild.160101.0800) · C:\Windows\system32\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
3c010ef9ce445cb95805937ab5172bbecb15e6b5eb8d662b174742bc08c7dcfc10.0.19041.508 (WinBuild.160101.0800) · C:\Windows\system32\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
becf13fd392c86751aaded817d68bab751d0f7a0a5d06295fb325c11d872126a10.0.19041.423 (WinBuild.160101.0800) · C:\Windows\system32\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
8bd7fb3a9c37930c1086dadd5edc84ffa4938e5ea7f93e5e5b56d6f8fac81b6910.0.19041.173 (WinBuild.160101.0800) · C:\Windows\system32\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
52084a6c94e314b26bad06a774b489c60a839e05946bcb5dd8facc96c740358b10.0.19041.1320 (WinBuild.160101.0800) · C:\Windows\system32\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
da6466b80fa1f72ba38af650ba4c062e3fbe2db007deb02e76c1a7d1bb692ae410.0.19041.1266 (WinBuild.160101.0800) · C:\Windows\SysWOW64\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
0ebcb9af4d55447643bfc1cb07ac3397f823a913dd5a49a292a2085629d2db6e10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
7c9e5aead42afbfd2c4d71feda4adc7d05501342e8ed8427b8d5f7fd744b458110.0.18362.815 (WinBuild.160101.0800) · C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
3bab2bad38553e174508c0ef3f6d385152129064cb00aa3c419e1832dfbd286110.0.18362.815 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
d8808f03494424dc8a6851260135a65912bc86149c5b9f0e834e1ef82aece10110.0.17763.1490 (WinBuild.160101.0800) · C:\Windows\system32\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
7f62ba34e5cf6711042847db9cbb9bb9d56ec4cea78f486ebb1fe665c223f65a10.0.17763.1490 (WinBuild.160101.0800) · C:\Windows\SysWOW64\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
e17621cc0ea64ae63ff156c1aa34d64c3ce1c0c81af4233a50dabc809f1aa26410.0.17763.1397 (WinBuild.160101.0800) · C:\Windows\SysWOW64\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
689f1b64a3ef9253b7a8814dfcbcb8d7ba4e4506bcb80c03191576a97986195f10.0.17763.1397 (WinBuild.160101.0800) · C:\Windows\system32\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
c27c3e7853c43acaf3f30369b528e1a1a8822f0aa1b97afcfc2a4d212ce3074710.0.17763.1217 (WinBuild.160101.0800) · C:\windows\SysWOW64\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
08bb6c2de9c2c6eaa7e0f4d95301a5c41b00f027655545d3e6c573a721637dba10.0.17763.1217 (WinBuild.160101.0800) · C:\windows\system32\SpatialAudioLicenseSrv.exe · signed by Microsoft Windows
bc2c22b1432d61cbe7aa9ffbc773d17f0fb219b1defbecd45f5c9fb5b70373edFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.