CmdID

CmdID / Files

NcsiUwpApp.exe

NcsiUwpApp file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real NcsiUwpApp.exe?

file version info and known copies
Installed inC:\Windows\SystemApps\NcsiUwpApp_8wekyb3d8bbwe\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionNcsiUwpApp

3 known copies

10.0.22000.120 (WinBuild.160101.0800) · C:\WINDOWS\SystemApps\NcsiUwpApp_8wekyb3d8bbwe\NcsiUwpApp.exe · signed by Microsoft Windows

993ffdac938b85817cc7d21e5456f16a519e4691717a1ed8f935369c7a488179

10.0.19041.423 (WinBuild.160101.0800) · C:\Windows\SystemApps\NcsiUwpApp_8wekyb3d8bbwe\NcsiUwpApp.exe · signed by Microsoft Windows

89b83f9f4e9db22406cb0ec90d75ccf98492731bc5c8745f481745c31cb522fd

10.0.19041.1052 (WinBuild.160101.0800) · C:\Windows\SystemApps\NcsiUwpApp_8wekyb3d8bbwe\NcsiUwpApp.exe · signed by Microsoft Windows

5a0b29398d7af20bba323c0441caa6c0136d8b6fbac963ad5bc1c3c22d3f20cd

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.