CmdID

CmdID / Files

LockScreenContentServer.exe

LockScreenContent Server file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real LockScreenContentServer.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionLockScreenContent Server

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\LockScreenContentServer.exe · signed by Microsoft Windows

b9addee6d316c5b0c7b94cdc5a2f84d5da77df6a23ed6dce8bb4741a95af2ac8

10.0.19041.746 (WinBuild.160101.0800) · C:\Windows\system32\LockScreenContentServer.exe · signed by Microsoft Windows

cb2278884f04fd34753f7a20e5865ef5fc4fa47c28df9ac14ad6e922713af8c6

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\LockScreenContentServer.exe · signed by Microsoft Windows

217a41ab21095d289867ad177de71241a970ee8fa7f569c4751f6190f8fdafff

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\LockScreenContentServer.exe · signed by Microsoft Windows

1b7800391cdfb7e95dbbca1b7e13432b3d5893346524bedfe17d21855e51d8f6

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\LockScreenContentServer.exe · signed by Microsoft Windows

1f7de5d4699a7129b1c02f963dfecf0e6009804bc27c90a105c9e8907417766a

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\LockScreenContentServer.exe · signed by Microsoft Windows

df1e8aa50df4a2ee02220d8466207462b3c56846731748ee33321df4fdb32d2b

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.