Spectrum.exe
Windows Perception Service file version info
Program on Windows 6 known copies with hashes
Is it the real Spectrum.exe?
C:\Windows\system32\6 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\Spectrum.exe · signed by Microsoft Windows
f27b5362212ed96ebd361c439aca1370f418485a84cfb43ad573f56073b8c3ce10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\Spectrum.exe · signed by Microsoft Windows
12e96bb53a1e11750c7afca449ebd0ff340a6088e1fa4b4cc0a448e50e557e9810.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\Spectrum.exe · signed by Microsoft Windows
85c48785e9b56b51f6f9da63024c60409e8674ee76d369126fb4aa803501a83d10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\Spectrum.exe · signed by Microsoft Windows
aff3d4ab8b126fa099e6b7c6899c0c7fccd04401c5ac1890c96c689a65cd16b110.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\Spectrum.exe · signed by Microsoft Windows
d79729b2a955ae829d58a9f78eb0610f2e2014f52625a1e214d444fd45ee90de10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\Spectrum.exe · signed by Microsoft Windows
000d624c339f3ecf346b9266702954aaa5eb038f68242cd5f8ab7ecf1090f032From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.