verifiergui.exe
Driver Verifier Manager file version info
Program on Windows 10 known copies with hashes
Is it the real verifiergui.exe?
C:\Windows\system32\C:\Windows\SysWOW64\10 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\verifiergui.exe · signed by Microsoft Windows
68163c185af6475690f10d84727ab9232878706034ac3f0d67233d04db8d758510.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\verifiergui.exe · signed by Microsoft Windows
9bf9b7be973d88e8875df7d8aecd0d48ef641d788d829ba63d7267ad2af479a310.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\verifiergui.exe · signed by Microsoft Windows
19a383a3028816c56ab123962707adda9d3f68091c44f9d9e2f69e6ca935f15110.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\verifiergui.exe · signed by Microsoft Windows
20385e5addd1d1aa1868a9999a5e336d2969bc47b985441b2c11d15eb7dd564310.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\verifiergui.exe · signed by Microsoft Windows
addfd4d738fa1dbdfaadf946ce9ff0ea0326bdf38c5eb4dfec6cf1709aa4bbfe10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\verifiergui.exe · signed by Microsoft Windows
d098dad3eba6cefa83d5e1fd855b00eb12407330a3faaf3ea324b132de0bb30d10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\verifiergui.exe · signed by Microsoft Windows
5d1868e396a185b1893a9092858cdee53664d5554df4d3f797b48cff8e94f7af10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\verifiergui.exe · signed by Microsoft Windows
ec30a097830520b77a6beff40544271d01cb625cb29ecee1e8ad6d4b9ba4e96110.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\verifiergui.exe · signed by Microsoft Windows
c32c386510eca15c717b98025ae032c810e6e258593528bb45481d720cf73aef10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\verifiergui.exe · signed by Microsoft Windows
e1bda156b07b827feba54bb2c0341f5678886b70ea463f06d2ae1a162ca585acFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.