CmdID

CmdID / Files

PerceptionSimulationService.exe

Windows Perception Simulation Service file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real PerceptionSimulationService.exe?

file version info and known copies
Installed inC:\Windows\system32\PerceptionSimulation\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Perception Simulation Service

4 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe · signed by Microsoft Windows

45c5b880e3f3aae1be738bfd9bf2fed5b37d0736982f3c35d11bb2286ff3b5c5

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe · signed by Microsoft Windows

2fbd09d8c423876b4c47211fd878514db630dd38a0ee7292b608051ca2caf137

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe · signed by Microsoft Windows

f4a1550bfefbdc09da82f53ce94ef3261c75db1cc7c1edd1074d31f828a47316

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe · signed by Microsoft Windows

4460e7cef33cabd01263aa975e512a0622b305b9b74ddacc90edc8ccabaad745

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.