NarratorQuickStart.exe
Program on Windows 2 known copies with hashes
Is it the real NarratorQuickStart.exe?
Installed in
C:\Windows\SystemApps\microsoft.windows.narratorquickstart_8wekyb3d8bbwe\Signed byMicrosoft Windows
2 known copies
Version not recorded · C:\WINDOWS\SystemApps\microsoft.windows.narratorquickstart_8wekyb3d8bbwe\NarratorQuickStart.exe · signed by Microsoft Windows
9c93892be0ff0083dbdeb0a53aacb6965126e956af45bbad7c87682c3fa9239dVersion not recorded · C:\Windows\SystemApps\microsoft.windows.narratorquickstart_8wekyb3d8bbwe\NarratorQuickStart.exe · signed by Microsoft Windows
e0cb7c907e4fe45eaea60ddcc1200fc3dc1743ca188e578dc801e52a72711a05From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.