CmdID

CmdID / Files

CallingShellApp.exe

Calling App to host call progress on shell file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real CallingShellApp.exe?

file version info and known copies
Installed inC:\Windows\SystemApps\Microsoft.Windows.CallingShellApp_cw5n1h2txyewy\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionCalling App to host call progress on shell

2 known copies

10.0.22000.120 (WinBuild.160101.0800) · C:\WINDOWS\SystemApps\Microsoft.Windows.CallingShellApp_cw5n1h2txyewy\CallingShellApp.exe · signed by Microsoft Windows

92e2a2e81c2c9fb697c9fea00b3caa6814676c64fd17d05549ee116af60d9b4e

10.0.19041.546 (WinBuild.160101.0800) · C:\Windows\SystemApps\Microsoft.Windows.CallingShellApp_cw5n1h2txyewy\CallingShellApp.exe · signed by Microsoft Windows

e3041999eb0a4378e18d792a3cae1d8f60dd3c438069aca0b17aa6457c2da4fb

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.