CmdID

CmdID / Files

LicensingUI.exe

Licensing UI file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real LicensingUI.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionLicensing UI

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\LicensingUI.exe · signed by Microsoft Windows

0ac952f86c1483b33f94ad1d4fc1fb0cc23e1fe3e36869a7c3bffbc924c4b6e3

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\LicensingUI.exe · signed by Microsoft Windows

0e9eb89aa0df9bb84a8f11b0bb3e9d89905355de34c91508968b4cb78bc3f6c5

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\LicensingUI.exe · signed by Microsoft Windows

bcb44bd5f1738fd10a2150eb59aa4c70dd3dac09085427b1b9ca427b45f26685

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\LicensingUI.exe · signed by Microsoft Windows

3c0d225cf94b88edc3135219be895c0046dfee1839a85ae3052a6f0a9b72b4b6

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\LicensingUI.exe · signed by Microsoft Windows

5106206f1502ed82eec42f2a592d3c9deef70ed54b2967bc0ea8ff4d9ba1bd28

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\LicensingUI.exe · signed by Microsoft Windows

7a4e307a372d56387ac61870e770eb0097a12c26fe2c470d14d41ee76e3c0779

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\LicensingUI.exe · signed by Microsoft Windows

cd0a1121e8a7b96dfd341fbd1f53016cd1c185ef868cd7250326047b7cb48a0d

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.