home

XtuService.exe

Intel

It runs as a separate (within the context of its own process) windows Service named “Intel(R) Extreme Tuning Utility Service”.
Publisher:
Intel  (signed and verified)

Description:
XtuService

Version:
3.0.25.0

MD5:
f9f6502d8e1e09768ac05339570a6afa

SHA-1:
2b24564ef1719056585d776cc460f743129b00d6

SHA-256:
8b256eee18acc0b7de574f7dbf4c0438cde922c06841ca54da8d828de911c2a0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 3:14:07 PM UTC  (today)

File size:
13.5 KB (13,840 bytes)

Product version:
3.0.25.0

Original file name:
XtuService.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\intel\extreme tuning utility\xtuservice.exe

Digital Signature
Signed by:
Intel

Authority:
Intel Corporation

Valid from:
9/21/2010 7:12:54 AM

Valid to:
9/5/2013 7:12:54 AM

Subject:
CN=Intel(R) Software (Pre-release), O=Intel, L=Hillsboro, S=OR, C=US

Issuer:
CN=Intel External Basic Issuing CA 3B, O=Intel Corporation, C=US

Serial number:
416EC9A1000100005B7D

File PE Metadata
Compilation timestamp:
2/15/2011 8:21:51 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
192:m0uV4O+xD8IRn+oa3FhyOOcJxPHyowJL/B8z+L7yVrv98tN9urTMx:Du2OyIIRJkybcJVHYJLBAcwrvZrg

Entry address:
0x316E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.3514

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
4.5 KB (4,608 bytes)

Service
Display name:
Intel(R) Extreme Tuning Utility Service

Service name:
XTU3SERVICE

Type:
Win32OwnProcess


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.