vmcompute.exe
Hyper-V Host Compute Service file version info
Program on Windows 2 known copies with hashes
Is it the real vmcompute.exe?
Installed in
C:\Windows\system32\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionHyper-V Host Compute Service
2 known copies
10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\vmcompute.exe · signed by Microsoft Windows
ae2c772c35145561da8616c2c8d1fd354ecc0a7896facb5c7b8a8393cce894be10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\vmcompute.exe · signed by Microsoft Windows
35b1a6d61ce6155d22a7be89d5209690a2ffa247c94d412ea3f2f274655348f4From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.