CmdID

CmdID / Files

pcaui.exe

Program Compatibility Assistant User Interface file version info

Program on Windows 14 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real pcaui.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionProgram Compatibility Assistant User Interface

14 known copies

10.0.22000.65 (WinBuild.160101.0800) · C:\WINDOWS\system32\pcaui.exe · signed by Microsoft Windows

3f96f3b23ceb6edc0242fdd29764e46497bf2bae3c636b155fab2d59828717f3

10.0.22000.65 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\pcaui.exe · signed by Microsoft Windows

bb49b7da3124e5d2eadc7f94867bea003ec5fe433bd0ee005c725e919bf1e75a

10.0.19041.928 (WinBuild.160101.0800) · C:\Windows\system32\pcaui.exe · signed by Microsoft Windows

8ba6c553c6b6916f42455f77c9049e85c3f848c8c6d0336cdcfdb11033e8fd66

10.0.19041.928 (WinBuild.160101.0800) · C:\Windows\SysWOW64\pcaui.exe · signed by Microsoft Windows

acf53d8f3c8edda9a68d8915edf64fc9f289382fd43a3281f7b88a794e70fbfb

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\pcaui.exe · signed by Microsoft Windows

3b853261a2b8353a0e985f5dd57667e0999af659fa27d25e308ee9d2667ee607

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\pcaui.exe · signed by Microsoft Windows

d05751968c1691e54724cf46bb14f09f904da98896b4f95f24625f250433c5b7

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\pcaui.exe · signed by Microsoft Windows

52807087de74802c3580bc9a759e8922c27bdc47f2e3111b3860f45e5cff042c

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\pcaui.exe · signed by Microsoft Windows

594ea6a7108c6d39b55c27a549059079c0d52c9cd5d37a5fb617baff56a5d53d

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\pcaui.exe · signed by Microsoft Windows

1d16441035eb9c6ea116de582bbc9b6e794c4bed3b4045348cf10a62f6cc71a1

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\pcaui.exe · signed by Microsoft Windows

39817b66c11dad6d7a5b606c7146cc8b6590371ac3a942d700d2ea3e4bc3ff1f

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\pcaui.exe · signed by Microsoft Windows

2960b55cd427b82581be4afb9aaf2abc2ce8d5cf78e9a9f4aaeb4ce527848a82

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\pcaui.exe · signed by Microsoft Windows

60633f75c36e910986c0b00479b15cd15541b2b7092ba8bf28a44d59211fedc2

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\system32\pcaui.exe · not signed

19b6f5a424ec5c5d9b681bee57d1f9ead1ad953c36985023d7e82a234b48202f

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\SysWOW64\pcaui.exe · not signed

516ef56be418e630cc3e16cbe1932d0a6d2e5a402546a723780a0282d7ca60f0

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.