Versions

1.31.8.1 sys_sysscbld	12.07%
1.28.487.1 sys_sysscbld	18.97%
1.27.798.1 sys_sysscbld	31.03%
1.27.757.1 sys_sysscbld	31.03%
1.27.757.1 sys_sysscbld	1.72%
1.26.242.3 SYSTEM	5.17%

There are 6 versions of heciserver.exe in the wild, the latest version being 1.31.8.1 sys_sysscbld. It is started as a Windows Service with the name 'Intel(R) Capability Licensing Service Interface' and described as “Version: 1.26.242.3”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 678 KB. The file is a digitally signed and issued to Intel® Trusted Connect Service by Intel Corporation. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is about 0.0000% including both foreground and background operations, the average private memory consumption is about 1.8 MB with the maximum memory reaching around 5.24 MB. Addionally, typically read and write I/O disk operations is about 19 Bytes per minute for reads and 0 Bytes per minute for writes.